OwlCyberSecurity - MANAGER

Edit File: error_log

[Sat Feb 21 10:48:52.618313 2026] [ssl:warn] [pid 2503394:tid 2503394] AH01909: denederveensehoevesite.science-on-stage.sk:443:0 server certificate does NOT include an ID which matches the server name [ N 2026-02-21 10:48:52.8829 1926564/T1 age/Wat/WatchdogMain.cpp:1365 ]: Starting Passenger watchdog... [ N 2026-02-21 10:48:52.9154 1926568/T1 age/Cor/CoreMain.cpp:1284 ]: Starting Passenger core... [ N 2026-02-21 10:48:52.9157 1926568/T1 age/Cor/CoreMain.cpp:245 ]: Passenger core running in multi-application mode. [ N 2026-02-21 10:48:52.9686 1926568/T1 age/Cor/CoreMain.cpp:962 ]: Passenger core online, PID 1926568 [Sat Feb 21 10:48:52.969907 2026] [:notice] [pid 2503394:tid 2503394] mod_ruid2/0.9.8 enabled [Sat Feb 21 10:48:52.970660 2026] [mpm_prefork:notice] [pid 2503394:tid 2503394] AH00163: Apache/2.4.66 (cPanel) OpenSSL/1.1.1f mod_bwlimited/1.4 Phusion_Passenger/6.1.2 configured -- resuming normal operations [Sat Feb 21 10:48:52.970676 2026] [core:notice] [pid 2503394:tid 2503394] AH00094: Command line: '/usr/sbin/httpd' [Sat Feb 21 10:48:55.565514 2026] [security2:error] [pid 1926591:tid 1926591] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHR5Og6Z1aVfSPEOAZHgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 10:48:55.565622 2026] [security2:error] [pid 1926591:tid 1926591] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHR5Og6Z1aVfSPEOAZHgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 10:49:23.743265 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/private/.env"] [unique_id "aZlHY2qRIc0HDTPP_QockwAAAAk"] [Sat Feb 21 10:49:23.801484 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.155.68.145:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.science-on-stage.sk"] [uri "/.env"] [unique_id "aZlHYxHl2U-jS0ZSEvb--wAAAAM"] [Sat Feb 21 10:49:24.931642 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/backup/.env"] [unique_id "aZlHZMHYh9vEh09pC4OG9gAAAAY"] [Sat Feb 21 10:49:25.468932 2026] [security2:error] [pid 1926619:tid 1926619] [client 45.155.68.145:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "science-on-stage.sk"] [uri "/.env"] [unique_id "aZlHZQQTYp1FL95ygPhNZwAAAAU"] [Sat Feb 21 10:49:27.298270 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/.env"] [unique_id "aZlHZwQTYp1FL95ygPhNaAAAAAU"] [Sat Feb 21 10:49:28.557040 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dev/.env"] [unique_id "aZlHaMHYh9vEh09pC4OG9wAAAAY"] [Sat Feb 21 10:49:29.873748 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/staging/.env"] [unique_id "aZlHaQQTYp1FL95ygPhNaQAAAAU"] [Sat Feb 21 10:49:31.184584 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/production/.env"] [unique_id "aZlHawBA6wjZoL6uVnyrxwAAAAI"] [Sat Feb 21 10:49:32.596153 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/.env"] [unique_id "aZlHbMM5vNyyeo5gKbcQZgAAAAc"] [Sat Feb 21 10:49:47.534675 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/administrator/.env"] [unique_id "aZlHe0jxORN6mSk10kY9fgAAAAE"] [Sat Feb 21 10:49:48.905718 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cms/.env"] [unique_id "aZlHfJOg6Z1aVfSPEOAZQAAAAAA"] [Sat Feb 21 10:49:50.244504 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/portal/.env"] [unique_id "aZlHfsHYh9vEh09pC4OHBAAAAAY"] [Sat Feb 21 10:49:51.799303 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dashboard/.env"] [unique_id "aZlHf2qRIc0HDTPP_QocowAAAAk"] [Sat Feb 21 10:49:52.597248 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHgABA6wjZoL6uVnyr0wAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 10:49:52.597337 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHgABA6wjZoL6uVnyr0wAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 10:49:53.012741 2026] [access_compat:error] [pid 1926664:tid 1926664] [client 101.32.49.171:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 10:49:53.013062 2026] [access_compat:error] [pid 1926664:tid 1926664] [client 101.32.49.171:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 10:49:53.013593 2026] [access_compat:error] [pid 1926664:tid 1926664] [client 101.32.49.171:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 10:49:53.117382 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/crm/.env"] [unique_id "aZlHgQQTYp1FL95ygPhNdgAAAAU"] [Sat Feb 21 10:49:54.409617 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mail/.env"] [unique_id "aZlHgmqRIc0HDTPP_QocpAAAAAk"] [Sat Feb 21 10:49:54.745283 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHgsM5vNyyeo5gKbcQcgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 10:49:54.745395 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHgsM5vNyyeo5gKbcQcgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 10:49:55.683533 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mailer/.env"] [unique_id "aZlHgwQTYp1FL95ygPhNdwAAAAU"] [Sat Feb 21 10:49:57.032436 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/deployment/.env"] [unique_id "aZlHhUjxORN6mSk10kY9gwAAAAE"] [Sat Feb 21 10:49:58.293679 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/.env"] [unique_id "aZlHhhHl2U-jS0ZSEvb_EgAAAAM"] [Sat Feb 21 10:49:59.652543 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/helm/.env"] [unique_id "aZlHh0jxORN6mSk10kY9hAAAAAE"] [Sat Feb 21 10:50:01.094591 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/terraform/.env"] [unique_id "aZlHiXxJlIGYvmAwwn3itQAAAAQ"] [Sat Feb 21 10:50:02.930706 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ansible/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ansible/.env"] [unique_id "aZlHisHYh9vEh09pC4OHCwAAAAY"] [Sat Feb 21 10:50:11.697729 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env_example"] [unique_id "aZlHkwQTYp1FL95ygPhNggAAAAU"] [Sat Feb 21 10:50:11.706441 2026] [security2:error] [pid 1926601:tid 1926601] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHk2qRIc0HDTPP_QocrwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 10:50:11.706502 2026] [security2:error] [pid 1926601:tid 1926601] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHk2qRIc0HDTPP_QocrwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 10:50:13.093075 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/core/.env"] [unique_id "aZlHlRHl2U-jS0ZSEvb_GQAAAAM"] [Sat Feb 21 10:50:13.389415 2026] [security2:error] [pid 1926664:tid 1926664] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlHlcHYh9vEh09pC4OHEAAAAAY"] [Sat Feb 21 10:50:13.389482 2026] [security2:error] [pid 1926664:tid 1926664] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlHlcHYh9vEh09pC4OHEAAAAAY"] [Sat Feb 21 10:50:17.417504 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/local/.env"] [unique_id "aZlHmWqRIc0HDTPP_QocsgAAAAk"] [Sat Feb 21 10:50:18.909411 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/application/.env"] [unique_id "aZlHmsHYh9vEh09pC4OHEwAAAAY"] [Sat Feb 21 10:50:23.088480 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlHncHYh9vEh09pC4OHFAAAAAY"] [Sat Feb 21 10:50:23.088623 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlHncHYh9vEh09pC4OHFAAAAAY"] [Sat Feb 21 10:50:23.215727 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/config/settings.ini"] [unique_id "aZlHn5y-LOfD_QJvFd5OVgAAAAg"] [Sat Feb 21 10:50:24.563678 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/env/.env"] [unique_id "aZlHoAQTYp1FL95ygPhNiQAAAAU"] [Sat Feb 21 10:50:27.088078 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/new/.env"] [unique_id "aZlHo0jxORN6mSk10kY9kgAAAAE"] [Sat Feb 21 10:50:28.607357 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/new/.env.local"] [unique_id "aZlHpABA6wjZoL6uVnyr5wAAAAI"] [Sat Feb 21 10:50:29.861683 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/new/.env.production"] [unique_id "aZlHpQQTYp1FL95ygPhNiwAAAAU"] [Sat Feb 21 10:50:31.215957 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/new/.env.staging"] [unique_id "aZlHpwBA6wjZoL6uVnyr6AAAAAI"] [Sat Feb 21 10:50:36.699805 2026] [authz_core:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] AH01630: client denied by server configuration: /home/arcticairandrefr/public_html/wp-config.php [Sat Feb 21 10:50:36.699920 2026] [negotiation:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] AH00687: Negotiation: discovered file(s) matching request: /home/arcticairandrefr/public_html/wp-config (None could be negotiated). [Sat Feb 21 10:50:39.472274 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/awstats/.env"] [unique_id "aZlHrxHl2U-jS0ZSEvb_KQAAAAM"] [Sat Feb 21 10:50:40.913721 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/conf/.env"] [unique_id "aZlHsMHYh9vEh09pC4OHHwAAAAY"] [Sat Feb 21 10:50:42.480346 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cron/.env"] [unique_id "aZlHssM5vNyyeo5gKbcQjwAAAAc"] [Sat Feb 21 10:50:44.026709 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/www/.env"] [unique_id "aZlHtGqRIc0HDTPP_QocwQAAAAk"] [Sat Feb 21 10:50:45.362588 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/app/.env"] [unique_id "aZlHtZOg6Z1aVfSPEOAZYQAAAAA"] [Sat Feb 21 10:50:46.633475 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/env.backup"] [unique_id "aZlHtsHYh9vEh09pC4OHIgAAAAY"] [Sat Feb 21 10:50:46.771771 2026] [security2:error] [pid 1926601:tid 1926601] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHtmqRIc0HDTPP_QocwgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 10:50:46.771831 2026] [security2:error] [pid 1926601:tid 1926601] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHtmqRIc0HDTPP_QocwgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 10:50:47.840902 2026] [access_compat:error] [pid 1927624:tid 1927624] [client 42.77.42.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xmlrpc.php [Sat Feb 21 10:50:49.976524 2026] [security2:error] [pid 1926613:tid 1926613] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHuXxJlIGYvmAwwn3i1AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 10:50:49.976978 2026] [security2:error] [pid 1926613:tid 1926613] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlHuXxJlIGYvmAwwn3i1AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 10:50:53.505628 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/js/.env"] [unique_id "aZlHvcHYh9vEh09pC4OHJQAAAAY"] [Sat Feb 21 10:50:54.963666 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/core/.env"] [unique_id "aZlHvgQTYp1FL95ygPhNmgAAAAU"] [Sat Feb 21 10:50:56.626852 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/nginx/.env"] [unique_id "aZlHwJOg6Z1aVfSPEOAZaAAAAAA"] [Sat Feb 21 10:50:57.918509 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/site/.env"] [unique_id "aZlHwQBA6wjZoL6uVnyr-AAAAAI"] [Sat Feb 21 10:50:58.240932 2026] [access_compat:error] [pid 1926664:tid 1926664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:50:59.367406 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/xampp/.env"] [unique_id "aZlHw3xJlIGYvmAwwn3i2gAAAAQ"] [Sat Feb 21 10:51:00.763518 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aZlHxMHYh9vEh09pC4OHKQAAAAY"] [Sat Feb 21 10:51:02.268557 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/.env.local"] [unique_id "aZlHxnxJlIGYvmAwwn3i2wAAAAQ"] [Sat Feb 21 10:51:03.677671 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/.env.production"] [unique_id "aZlHx8HYh9vEh09pC4OHKgAAAAY"] [Sat Feb 21 10:51:05.089629 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/.env.staging"] [unique_id "aZlHyRHl2U-jS0ZSEvb_NwAAAAM"] [Sat Feb 21 10:51:06.366223 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/core/.env.local"] [unique_id "aZlHysHYh9vEh09pC4OHKwAAAAY"] [Sat Feb 21 10:51:07.913678 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/core/.env.production"] [unique_id "aZlHywBA6wjZoL6uVnyr_QAAAAI"] [Sat Feb 21 10:51:09.279063 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/laravel/core/.env.staging"] [unique_id "aZlHzRHl2U-jS0ZSEvb_OQAAAAM"] [Sat Feb 21 10:51:10.580072 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/main/.env"] [unique_id "aZlHznxJlIGYvmAwwn3i4AAAAAQ"] [Sat Feb 21 10:51:11.842011 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/app/private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/app/private/.env"] [unique_id "aZlHz5Og6Z1aVfSPEOAZcAAAAAA"] [Sat Feb 21 10:51:13.178464 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/logs/laravel.log"] [unique_id "aZlH0QBA6wjZoL6uVnysAAAAAAI"] [Sat Feb 21 10:51:13.227989 2026] [security2:error] [pid 1926613:tid 1926613] [client 66.249.68.35:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "serversvalley.com"] [uri "/css/colors/orange.css"] [unique_id "aZlH0XxJlIGYvmAwwn3i4QAAAAQ"], referer: https://serversvalley.com/ [Sat Feb 21 10:51:13.228045 2026] [security2:error] [pid 1926613:tid 1926613] [client 66.249.68.35:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "serversvalley.com"] [uri "/css/colors/orange.css"] [unique_id "aZlH0XxJlIGYvmAwwn3i4QAAAAQ"], referer: https://serversvalley.com/ [Sat Feb 21 10:51:14.465040 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/composer.lock"] [unique_id "aZlH0py-LOfD_QJvFd5OcwAAAAg"] [Sat Feb 21 10:51:15.682723 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/server.key"] [unique_id "aZlH0wBA6wjZoL6uVnysAQAAAAI"] [Sat Feb 21 10:51:17.894810 2026] [security2:error] [pid 1926619:tid 1926619] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlH1QQTYp1FL95ygPhNqQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F5 [Sat Feb 21 10:51:17.894927 2026] [security2:error] [pid 1926619:tid 1926619] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlH1QQTYp1FL95ygPhNqQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F5 [Sat Feb 21 10:51:18.195067 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/php5.ini"] [unique_id "aZlH1hHl2U-jS0ZSEvb_PwAAAAM"] [Sat Feb 21 10:51:19.481226 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlH1hHl2U-jS0ZSEvb_PwAAAAM"] [Sat Feb 21 10:51:19.481296 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlH1hHl2U-jS0ZSEvb_PwAAAAM"] [Sat Feb 21 10:51:32.227788 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/config.ini"] [unique_id "aZlH5Jy-LOfD_QJvFd5OfwAAAAg"] [Sat Feb 21 10:51:34.775559 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/.aws/credentials.bak"] [unique_id "aZlH5mqRIc0HDTPP_Qoc4gAAAAk"] [Sat Feb 21 10:51:36.073421 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/credentials/admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.aws/credentials/admin/.env"] [unique_id "aZlH6AQTYp1FL95ygPhNtAAAAAU"] [Sat Feb 21 10:51:38.826275 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/.bak"] [unique_id "aZlH6gBA6wjZoL6uVnysEAAAAAI"] [Sat Feb 21 10:51:41.403556 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.bitbucket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.bitbucket/.env"] [unique_id "aZlH7Zy-LOfD_QJvFd5OgwAAAAg"] [Sat Feb 21 10:51:45.309457 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "aZlH8QQTYp1FL95ygPhNuQAAAAU"] [Sat Feb 21 10:51:46.518179 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.circleci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.circleci/.env"] [unique_id "aZlH8sHYh9vEh09pC4OHRQAAAAY"] [Sat Feb 21 10:51:50.616652 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env-db"] [unique_id "aZlH9sM5vNyyeo5gKbcQuAAAAAc"] [Sat Feb 21 10:51:51.838252 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.back"] [unique_id "aZlH95y-LOfD_QJvFd5OiAAAAAg"] [Sat Feb 21 10:51:53.256319 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bkp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.bkp"] [unique_id "aZlH-cM5vNyyeo5gKbcQuQAAAAc"] [Sat Feb 21 10:51:54.561692 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.credentials"] [unique_id "aZlH-py-LOfD_QJvFd5OiQAAAAg"] [Sat Feb 21 10:51:55.943935 2026] [security2:error] [pid 1926601:tid 1926601] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.email"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.email"] [unique_id "aZlH-2qRIc0HDTPP_Qoc7gAAAAk"] [Sat Feb 21 10:51:57.184838 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hidden"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.hidden"] [unique_id "aZlH_WM-kOlwXmZZvLvVtAAAAAo"] [Sat Feb 21 10:51:58.301161 2026] [access_compat:error] [pid 1926601:tid 1926601] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:51:58.566329 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hide"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.hide"] [unique_id "aZlH_py-LOfD_QJvFd5OiwAAAAg"] [Sat Feb 21 10:51:59.853763 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.js"] [unique_id "aZlH_xHl2U-jS0ZSEvb_VQAAAAM"] [Sat Feb 21 10:52:01.403045 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.key"] [unique_id "aZlIAcHYh9vEh09pC4OHTwAAAAY"] [Sat Feb 21 10:52:02.795363 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.mail"] [unique_id "aZlIAhHl2U-jS0ZSEvb_VgAAAAM"] [Sat Feb 21 10:52:04.117570 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIAhHl2U-jS0ZSEvb_VgAAAAM"] [Sat Feb 21 10:52:04.117622 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIAhHl2U-jS0ZSEvb_VgAAAAM"] [Sat Feb 21 10:52:04.190261 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.smtp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.smtp"] [unique_id "aZlIBMHYh9vEh09pC4OHUAAAAAY"] [Sat Feb 21 10:52:05.753528 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.swp"] [unique_id "aZlIBQBA6wjZoL6uVnysHQAAAAI"] [Sat Feb 21 10:52:07.199469 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 10:52:07.256131 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.testing"] [unique_id "aZlIB8M5vNyyeo5gKbcQwQAAAAc"] [Sat Feb 21 10:52:08.478172 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.uat"] [unique_id "aZlICEjxORN6mSk10kY90AAAAAE"] [Sat Feb 21 10:52:09.733204 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env_aws"] [unique_id "aZlICcM5vNyyeo5gKbcQwgAAAAc"] [Sat Feb 21 10:52:11.002306 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env_backup"] [unique_id "aZlIC0jxORN6mSk10kY90QAAAAE"] [Sat Feb 21 10:52:12.232418 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env_copy"] [unique_id "aZlIDMHYh9vEh09pC4OHUwAAAAY"] [Sat Feb 21 10:52:13.319887 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIDWM-kOlwXmZZvLvVvQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 10:52:13.319974 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIDWM-kOlwXmZZvLvVvQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 10:52:13.414406 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env_private"] [unique_id "aZlIDQQTYp1FL95ygPhNyQAAAAU"] [Sat Feb 21 10:52:14.648511 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env_secret"] [unique_id "aZlIDpy-LOfD_QJvFd5OkgAAAAg"] [Sat Feb 21 10:52:16.065253 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env~"] [unique_id "aZlIEMM5vNyyeo5gKbcQxQAAAAc"] [Sat Feb 21 10:52:17.279834 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.git/"] [unique_id "aZlIEZOg6Z1aVfSPEOAZlAAAAAA"] [Sat Feb 21 10:52:18.509063 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.git/config"] [unique_id "aZlIEsHYh9vEh09pC4OHVgAAAAY"] [Sat Feb 21 10:52:19.639060 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIE0jxORN6mSk10kY91QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 10:52:19.639147 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIE0jxORN6mSk10kY91QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 10:52:19.876833 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.github/.env"] [unique_id "aZlIE5y-LOfD_QJvFd5OlAAAAAg"] [Sat Feb 21 10:52:22.387230 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.gitignore"] [unique_id "aZlIFmM-kOlwXmZZvLvVwgAAAAo"] [Sat Feb 21 10:52:24.908126 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.gitlab-ci/.env"] [unique_id "aZlIGEjxORN6mSk10kY92AAAAAE"] [Sat Feb 21 10:52:27.311544 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.gitlab/.env"] [unique_id "aZlIG3xJlIGYvmAwwn3jCQAAAAQ"] [Sat Feb 21 10:52:28.505270 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.hg/"] [unique_id "aZlIHGM-kOlwXmZZvLvVxQAAAAo"] [Sat Feb 21 10:52:29.828227 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.idea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.idea/.env"] [unique_id "aZlIHQQTYp1FL95ygPhN0QAAAAU"] [Sat Feb 21 10:52:41.285780 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIJ3xJlIGYvmAwwn3jDwAAAAQ"] [Sat Feb 21 10:52:41.285875 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIJ3xJlIGYvmAwwn3jDwAAAAQ"] [Sat Feb 21 10:52:45.246075 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.svn/"] [unique_id "aZlILQBA6wjZoL6uVnysMgAAAAI"] [Sat Feb 21 10:52:53.267744 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aZlINWM-kOlwXmZZvLvV0gAAAAo"] [Sat Feb 21 10:52:54.624885 2026] [security2:error] [pid 1927624:tid 1927624] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "aZlINpy-LOfD_QJvFd5OpwAAAAg"] [Sat Feb 21 10:52:55.868659 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "aZlIN2M-kOlwXmZZvLvV0wAAAAo"] [Sat Feb 21 10:52:57.174179 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "aZlIOZOg6Z1aVfSPEOAZqgAAAAA"] [Sat Feb 21 10:52:57.679353 2026] [security2:error] [pid 1926599:tid 1926599] [client 51.79.82.101:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlIOABA6wjZoL6uVnysNwAAAAI"] [Sat Feb 21 10:52:57.679420 2026] [security2:error] [pid 1926599:tid 1926599] [client 51.79.82.101:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlIOABA6wjZoL6uVnysNwAAAAI"] [Sat Feb 21 10:52:58.502458 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "aZlIOhHl2U-jS0ZSEvb_dgAAAAM"] [Sat Feb 21 10:52:59.770613 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "aZlIO3xJlIGYvmAwwn3jGgAAAAQ"] [Sat Feb 21 10:53:02.566344 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/3-sequelize/final/.env"] [unique_id "aZlIPkjxORN6mSk10kY97AAAAAE"] [Sat Feb 21 10:53:03.961722 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/31_structure_tests/.env"] [unique_id "aZlIP5Og6Z1aVfSPEOAZrQAAAAA"] [Sat Feb 21 10:53:12.561883 2026] [security2:error] [pid 1926599:tid 1926599] [client 129.121.74.194:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlIRwBA6wjZoL6uVnysPwAAAAI"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 10:53:12.561978 2026] [security2:error] [pid 1926599:tid 1926599] [client 129.121.74.194:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlIRwBA6wjZoL6uVnysPwAAAAI"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 10:53:19.003984 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /__tests__/test-become/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/__tests__/test-become/.env"] [unique_id "aZlITxHl2U-jS0ZSEvb_fwAAAAM"] [Sat Feb 21 10:53:21.434802 2026] [access_compat:error] [pid 1929066:tid 1929066] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:53:33.014441 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIXGhYNZI398ojwTnYfQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fsubsystem%2Floop5%2Fmq [Sat Feb 21 10:53:33.014536 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIXGhYNZI398ojwTnYfQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fsubsystem%2Floop5%2Fmq [Sat Feb 21 10:53:39.814994 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/_static/.env"] [unique_id "aZlIY8M5vNyyeo5gKbcQ8QAAAAc"] [Sat Feb 21 10:53:42.299678 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 10:53:42.306320 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/acme-challenge/.env"] [unique_id "aZlIZmM-kOlwXmZZvLvV7gAAAAo"] [Sat Feb 21 10:53:43.603575 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/acme/.env"] [unique_id "aZlIZwQTYp1FL95ygPhN-wAAAAU"] [Sat Feb 21 10:53:44.908504 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/acme_challenges/.env"] [unique_id "aZlIaHxJlIGYvmAwwn3jMQAAAAQ"] [Sat Feb 21 10:53:46.208772 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/actions-server/.env"] [unique_id "aZlIagQTYp1FL95ygPhN_AAAAAU"] [Sat Feb 21 10:53:50.065056 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/admin-app/.env"] [unique_id "aZlIbpOg6Z1aVfSPEOAZxAAAAAA"] [Sat Feb 21 10:53:51.437098 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/admin-panel/.env"] [unique_id "aZlIb8HYh9vEh09pC4OHgQAAAAY"] [Sat Feb 21 10:53:52.055197 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIbxHl2U-jS0ZSEvb_jwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop0%2Fbdi [Sat Feb 21 10:53:52.055293 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIbxHl2U-jS0ZSEvb_jwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop0%2Fbdi [Sat Feb 21 10:53:56.160749 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIdGhYNZI398ojwTnYiQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 10:53:56.160838 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIdGhYNZI398ojwTnYiQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 10:53:57.712486 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIdUjxORN6mSk10kY-CAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 10:53:57.712567 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIdUjxORN6mSk10kY-CAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 10:53:59.080905 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/adminapp/.env"] [unique_id "aZlIdwBA6wjZoL6uVnysVQAAAAI"] [Sat Feb 21 10:54:01.675943 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIeMHYh9vEh09pC4OHhQAAAAY"] [Sat Feb 21 10:54:01.676054 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIeMHYh9vEh09pC4OHhQAAAAY"] [Sat Feb 21 10:54:01.745243 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/adminer/.env"] [unique_id "aZlIeQBA6wjZoL6uVnysVgAAAAI"] [Sat Feb 21 10:54:02.995429 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIekjxORN6mSk10kY-DAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 10:54:02.995517 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIekjxORN6mSk10kY-DAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 10:54:07.153813 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/agora/.env"] [unique_id "aZlIf3xJlIGYvmAwwn3jPQAAAAQ"] [Sat Feb 21 10:54:08.456055 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/alpha/.env"] [unique_id "aZlIgJOg6Z1aVfSPEOAZzgAAAAA"] [Sat Feb 21 10:54:09.962603 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/anaconda/.env"] [unique_id "aZlIgXxJlIGYvmAwwn3jPgAAAAQ"] [Sat Feb 21 10:54:19.064020 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api-server/.env"] [unique_id "aZlIiwQTYp1FL95ygPhODQAAAAU"] [Sat Feb 21 10:54:20.423982 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/.env.back"] [unique_id "aZlIjMM5vNyyeo5gKbcRCAAAAAc"] [Sat Feb 21 10:54:21.660283 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/.env.example"] [unique_id "aZlIjQQTYp1FL95ygPhODgAAAAU"] [Sat Feb 21 10:54:22.250554 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:54:23.067989 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/.env.sample"] [unique_id "aZlIj8HYh9vEh09pC4OHkQAAAAY"] [Sat Feb 21 10:54:24.055023 2026] [security2:error] [pid 1926613:tid 1926613] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIj3xJlIGYvmAwwn3jRgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 10:54:24.055128 2026] [security2:error] [pid 1926613:tid 1926613] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIj3xJlIGYvmAwwn3jRgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 10:54:24.471384 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/.env.save"] [unique_id "aZlIkJOg6Z1aVfSPEOAZ1wAAAAA"] [Sat Feb 21 10:54:24.614601 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIkEjxORN6mSk10kY-GgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 10:54:24.614697 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIkEjxORN6mSk10kY-GgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 10:54:36.187757 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/src/.env"] [unique_id "aZlInEjxORN6mSk10kY-IAAAAAE"] [Sat Feb 21 10:54:36.259567 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlInGM-kOlwXmZZvLvWDAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 10:54:36.259676 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlInGM-kOlwXmZZvLvWDAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 10:54:37.421961 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/v1/.env"] [unique_id "aZlInWhYNZI398ojwTnYngAAAAk"] [Sat Feb 21 10:54:40.195114 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/v2/.env"] [unique_id "aZlIoGhYNZI398ojwTnYnwAAAAk"] [Sat Feb 21 10:54:41.492309 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/apis/.env"] [unique_id "aZlIoZOg6Z1aVfSPEOAZ3wAAAAA"] [Sat Feb 21 10:54:42.023618 2026] [security2:error] [pid 1926602:tid 1926602] [client 208.109.231.205:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlIoBHl2U-jS0ZSEvb_qwAAAAM"] [Sat Feb 21 10:54:42.023726 2026] [security2:error] [pid 1926602:tid 1926602] [client 208.109.231.205:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlIoBHl2U-jS0ZSEvb_qwAAAAM"] [Sat Feb 21 10:54:43.939657 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app-order-client/.env"] [unique_id "aZlIo2hYNZI398ojwTnYoQAAAAk"] [Sat Feb 21 10:54:46.493438 2026] [security2:error] [pid 1926664:tid 1926664] [client 114.119.131.200:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIoMHYh9vEh09pC4OHmgAAAAY"], referer: https://asalinnovations.com/category/short-term-installment-loans-no-credit-check-2/ [Sat Feb 21 10:54:46.493494 2026] [security2:error] [pid 1926664:tid 1926664] [client 114.119.131.200:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlIoMHYh9vEh09pC4OHmgAAAAY"], referer: https://asalinnovations.com/category/short-term-installment-loans-no-credit-check-2/ [Sat Feb 21 10:54:46.522129 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/.env.example"] [unique_id "aZlIpnxJlIGYvmAwwn3jVAAAAAQ"] [Sat Feb 21 10:54:47.836444 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/.env.sample"] [unique_id "aZlIp8HYh9vEh09pC4OHmwAAAAY"] [Sat Feb 21 10:54:49.078804 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/.env.save"] [unique_id "aZlIqWM-kOlwXmZZvLvWFAAAAAo"] [Sat Feb 21 10:54:49.355932 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIqRHl2U-jS0ZSEvb_sAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 10:54:49.356010 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIqRHl2U-jS0ZSEvb_sAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 10:54:50.353602 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/.env.back"] [unique_id "aZlIqsHYh9vEh09pC4OHnAAAAAY"] [Sat Feb 21 10:54:51.506713 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/.env.back"] [unique_id "aZlIq2M-kOlwXmZZvLvWFQAAAAo"] [Sat Feb 21 10:54:52.837435 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/client/.env"] [unique_id "aZlIrJOg6Z1aVfSPEOAZ5wAAAAA"] [Sat Feb 21 10:54:54.283347 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "aZlIrhHl2U-jS0ZSEvb_tQAAAAM"] [Sat Feb 21 10:54:56.754191 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/config/.env"] [unique_id "aZlIsEjxORN6mSk10kY-MQAAAAE"] [Sat Feb 21 10:54:57.987433 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/config/dev/.env"] [unique_id "aZlIsQBA6wjZoL6uVnysfQAAAAI"] [Sat Feb 21 10:54:59.344573 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/frontend/.env"] [unique_id "aZlIs3xJlIGYvmAwwn3jXAAAAAQ"] [Sat Feb 21 10:55:00.728621 2026] [security2:error] [pid 1926619:tid 1926619] [client 158.158.105.51:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo2.247reactionpower.com"] [uri "/gettest.php"] [unique_id "aZlItAQTYp1FL95ygPhOLwAAAAU"] [Sat Feb 21 10:55:00.728714 2026] [security2:error] [pid 1926619:tid 1926619] [client 158.158.105.51:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo2.247reactionpower.com"] [uri "/gettest.php"] [unique_id "aZlItAQTYp1FL95ygPhOLwAAAAU"] [Sat Feb 21 10:55:02.702177 2026] [security2:error] [pid 1926613:tid 1926613] [client 158.158.105.51:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo2.247reactionpower.com"] [uri "/ava.php"] [unique_id "aZlItnxJlIGYvmAwwn3jYAAAAAQ"] [Sat Feb 21 10:55:02.702254 2026] [security2:error] [pid 1926613:tid 1926613] [client 158.158.105.51:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo2.247reactionpower.com"] [uri "/ava.php"] [unique_id "aZlItnxJlIGYvmAwwn3jYAAAAAQ"] [Sat Feb 21 10:55:04.090301 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app1-static/.env"] [unique_id "aZlIuAQTYp1FL95ygPhONQAAAAU"] [Sat Feb 21 10:55:05.578765 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app2-static/.env"] [unique_id "aZlIucM5vNyyeo5gKbcRMgAAAAc"] [Sat Feb 21 10:55:07.102554 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app_dir/.env"] [unique_id "aZlIu0jxORN6mSk10kY-PQAAAAE"] [Sat Feb 21 10:55:08.578952 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app_nginx_static_path/.env"] [unique_id "aZlIvMHYh9vEh09pC4OHtgAAAAY"] [Sat Feb 21 10:55:09.815365 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/application/.env.sample"] [unique_id "aZlIvZOg6Z1aVfSPEOAZ9gAAAAA"] [Sat Feb 21 10:55:11.131160 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/application/.env.save"] [unique_id "aZlIv2M-kOlwXmZZvLvWLgAAAAo"] [Sat Feb 21 10:55:12.616475 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/apps/.env"] [unique_id "aZlIwBHl2U-jS0ZSEvb_zQAAAAM"] [Sat Feb 21 10:55:13.863345 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/apps/client/.env"] [unique_id "aZlIwXxJlIGYvmAwwn3jZgAAAAQ"] [Sat Feb 21 10:55:15.046638 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Archipel/.env"] [unique_id "aZlIwwQTYp1FL95ygPhOPQAAAAU"] [Sat Feb 21 10:55:17.652351 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/asset_img/.env"] [unique_id "aZlIxcM5vNyyeo5gKbcROQAAAAc"] [Sat Feb 21 10:55:19.023063 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/assets/.env"] [unique_id "aZlIxwBA6wjZoL6uVnysjQAAAAI"] [Sat Feb 21 10:55:26.073902 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIzcHYh9vEh09pC4OHwQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 10:55:26.073961 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlIzcHYh9vEh09pC4OHwQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 10:55:29.563961 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Assignment3/.env"] [unique_id "aZlI0ZOg6Z1aVfSPEOAaAQAAAAA"] [Sat Feb 21 10:55:30.797708 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Assignment4/.env"] [unique_id "aZlI0sM5vNyyeo5gKbcRQQAAAAc"] [Sat Feb 21 10:55:32.129265 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/audio/.env"] [unique_id "aZlI1BHl2U-jS0ZSEvb_2QAAAAM"] [Sat Feb 21 10:55:34.138750 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlI1mM-kOlwXmZZvLvWOwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 10:55:34.138833 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlI1mM-kOlwXmZZvLvWOwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 10:55:36.402390 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/aws/.env"] [unique_id "aZlI2ABA6wjZoL6uVnysmAAAAAI"] [Sat Feb 21 10:55:38.005481 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /azure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/azure/.env"] [unique_id "aZlI2gQTYp1FL95ygPhOSwAAAAU"] [Sat Feb 21 10:55:39.363266 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "aZlI25Og6Z1aVfSPEOAaBwAAAAA"] [Sat Feb 21 10:55:40.652125 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "aZlI3ABA6wjZoL6uVnysmgAAAAI"] [Sat Feb 21 10:55:42.098532 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "aZlI3nxJlIGYvmAwwn3jdgAAAAQ"] [Sat Feb 21 10:55:43.559513 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "aZlI30jxORN6mSk10kY-VAAAAAE"] [Sat Feb 21 10:55:44.848444 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "aZlI4MM5vNyyeo5gKbcRSgAAAAc"] [Sat Feb 21 10:55:46.113590 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "aZlI4kjxORN6mSk10kY-VQAAAAE"] [Sat Feb 21 10:55:47.352717 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "aZlI4wBA6wjZoL6uVnysngAAAAI"] [Sat Feb 21 10:55:48.647306 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/back-end/app/.env"] [unique_id "aZlI5GhYNZI398ojwTnY1gAAAAk"] [Sat Feb 21 10:55:49.955662 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/back/.env"] [unique_id "aZlI5cM5vNyyeo5gKbcRTQAAAAc"] [Sat Feb 21 10:55:51.342946 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/backend/.env.local"] [unique_id "aZlI5wBA6wjZoL6uVnysoAAAAAI"] [Sat Feb 21 10:55:52.708656 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/backend/config/.env"] [unique_id "aZlI6AQTYp1FL95ygPhOVAAAAAU"] [Sat Feb 21 10:55:55.302074 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/backend/src/.env"] [unique_id "aZlI62hYNZI398ojwTnY2gAAAAk"] [Sat Feb 21 10:55:56.733323 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/backendfinaltest/.env"] [unique_id "aZlI7ABA6wjZoL6uVnysowAAAAI"] [Sat Feb 21 10:56:00.757856 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/base_dir/.env"] [unique_id "aZlI8AQTYp1FL95ygPhOWQAAAAU"] [Sat Feb 21 10:56:02.196155 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/basic-network/.env"] [unique_id "aZlI8pOg6Z1aVfSPEOAaFQAAAAA"] [Sat Feb 21 10:56:03.755659 2026] [security2:error] [pid 1926613:tid 1926613] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/bgoldd/.env"] [unique_id "aZlI83xJlIGYvmAwwn3jgAAAAAQ"] [Sat Feb 21 10:56:05.188681 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/bitcoind/.env"] [unique_id "aZlI9UjxORN6mSk10kY-YgAAAAE"] [Sat Feb 21 10:56:06.684639 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/blankon/.env"] [unique_id "aZlI9sHYh9vEh09pC4OH3wAAAAY"] [Sat Feb 21 10:56:08.256085 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/blob/.env"] [unique_id "aZlI-EjxORN6mSk10kY-ZAAAAAE"] [Sat Feb 21 10:56:09.587267 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/blog/.env"] [unique_id "aZlI-QBA6wjZoL6uVnysqQAAAAI"] [Sat Feb 21 10:56:10.844869 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blogs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/blogs/.env"] [unique_id "aZlI-hHl2U-jS0ZSEvb_8gAAAAM"] [Sat Feb 21 10:56:12.004833 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/blue/.env"] [unique_id "aZlI_EjxORN6mSk10kY-ZgAAAAE"] [Sat Feb 21 10:56:13.289909 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/bookchain-client/.env"] [unique_id "aZlI_RHl2U-jS0ZSEvb_8wAAAAM"] [Sat Feb 21 10:56:16.468860 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 10:56:21.012291 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/bootstrap/.env"] [unique_id "aZlJBRHl2U-jS0ZSEvb_9gAAAAM"] [Sat Feb 21 10:56:22.306401 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "aZlJBmhYNZI398ojwTnY6wAAAAk"] [Sat Feb 21 10:56:23.645587 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "aZlJB2M-kOlwXmZZvLvWYAAAAAo"] [Sat Feb 21 10:56:24.943496 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "aZlJCMHYh9vEh09pC4OH6wAAAAY"] [Sat Feb 21 10:56:27.223328 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/bucoffea/.env"] [unique_id "aZlJCwBA6wjZoL6uVnysswAAAAI"] [Sat Feb 21 10:56:31.096142 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/build/.env"] [unique_id "aZlJDxHl2U-jS0ZSEvb_-wAAAAM"] [Sat Feb 21 10:56:36.505818 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJFMHYh9vEh09pC4OH8AAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 10:56:36.505909 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJFMHYh9vEh09pC4OH8AAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 10:56:40.322570 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cardea/backend/.env"] [unique_id "aZlJGMHYh9vEh09pC4OH8gAAAAY"] [Sat Feb 21 10:56:41.614839 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cdw-backend/.env"] [unique_id "aZlJGcM5vNyyeo5gKbcRbQAAAAc"] [Sat Feb 21 10:56:42.856017 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cgi-bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cgi-bin/.env"] [unique_id "aZlJGgBA6wjZoL6uVnysvQAAAAI"] [Sat Feb 21 10:56:45.491490 2026] [security2:error] [pid 1930889:tid 1930889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch2-mytodo/.env"] [unique_id "aZlJHWL6_xZSA4URT4YXbwAAAAg"] [Sat Feb 21 10:56:46.831763 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch6-mytodo/.env"] [unique_id "aZlJHsHYh9vEh09pC4OH9QAAAAY"] [Sat Feb 21 10:56:48.415684 2026] [security2:error] [pid 1930889:tid 1930889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch6a-mytodo/.env"] [unique_id "aZlJIGL6_xZSA4URT4YXcAAAAAg"] [Sat Feb 21 10:56:49.802696 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch7-mytodo/.env"] [unique_id "aZlJIRHl2U-jS0ZSEvYABwAAAAM"] [Sat Feb 21 10:56:51.196921 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch7a-mytodo/.env"] [unique_id "aZlJI8HYh9vEh09pC4OH9wAAAAY"] [Sat Feb 21 10:56:52.572980 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch8-mytodo/.env"] [unique_id "aZlJJABA6wjZoL6uVnyswgAAAAI"] [Sat Feb 21 10:56:53.749336 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch8a-mytodo/.env"] [unique_id "aZlJJZOg6Z1aVfSPEOAaNgAAAAA"] [Sat Feb 21 10:56:54.080550 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJJcHYh9vEh09pC4OH-AAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 10:56:54.080638 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJJcHYh9vEh09pC4OH-AAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 10:56:54.996469 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ch8b-mytodo/.env"] [unique_id "aZlJJgBA6wjZoL6uVnyswwAAAAI"] [Sat Feb 21 10:56:56.242157 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Chai/.env"] [unique_id "aZlJKAQTYp1FL95ygPhOegAAAAU"] [Sat Feb 21 10:56:57.611770 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/challenge/.env"] [unique_id "aZlJKWM-kOlwXmZZvLvWdAAAAAo"] [Sat Feb 21 10:56:58.857016 2026] [security2:error] [pid 1930889:tid 1930889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/challenges/.env"] [unique_id "aZlJKmL6_xZSA4URT4YXdwAAAAg"] [Sat Feb 21 10:57:00.061715 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/charts/liveObjects/.env"] [unique_id "aZlJLEjxORN6mSk10kY-fwAAAAE"] [Sat Feb 21 10:57:01.444780 2026] [security2:error] [pid 1930889:tid 1930889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/chat-client/.env"] [unique_id "aZlJLWL6_xZSA4URT4YXeAAAAAg"] [Sat Feb 21 10:57:02.856931 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/chiminey/.env"] [unique_id "aZlJLhHl2U-jS0ZSEvYAEAAAAAM"] [Sat Feb 21 10:57:03.942696 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:57:05.652379 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ci/.env"] [unique_id "aZlJMWhYNZI398ojwTnZAwAAAAk"] [Sat Feb 21 10:57:07.032734 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/client-app/.env"] [unique_id "aZlJMxHl2U-jS0ZSEvYAEwAAAAM"] [Sat Feb 21 10:57:08.379972 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "aZlJNEjxORN6mSk10kY-hQAAAAE"] [Sat Feb 21 10:57:09.938503 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/client/src/.env"] [unique_id "aZlJNWM-kOlwXmZZvLvWfAAAAAo"] [Sat Feb 21 10:57:11.183302 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ClientApp/.env"] [unique_id "aZlJN8M5vNyyeo5gKbcRgAAAAAc"] [Sat Feb 21 10:57:12.411598 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/clld_dir/.env"] [unique_id "aZlJOEjxORN6mSk10kY-hwAAAAE"] [Sat Feb 21 10:57:13.651593 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cloud/.env"] [unique_id "aZlJOZOg6Z1aVfSPEOAaQQAAAAA"] [Sat Feb 21 10:57:15.011006 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aZlJO2M-kOlwXmZZvLvWfwAAAAo"] [Sat Feb 21 10:57:16.389096 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/code/api/.env"] [unique_id "aZlJPMM5vNyyeo5gKbcRgwAAAAc"] [Sat Feb 21 10:57:17.803412 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/code/web/.env"] [unique_id "aZlJPWM-kOlwXmZZvLvWgQAAAAo"] [Sat Feb 21 10:57:19.072326 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "aZlJPwQTYp1FL95ygPhOhwAAAAU"] [Sat Feb 21 10:57:20.366194 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/codenames-frontend/.env"] [unique_id "aZlJQABA6wjZoL6uVnys0gAAAAI"] [Sat Feb 21 10:57:22.000273 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "aZlJQWM-kOlwXmZZvLvWhAAAAAo"] [Sat Feb 21 10:57:23.367869 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/collected_static/.env"] [unique_id "aZlJQ4XWYBQ8sX5nXL9dKAAAAAQ"] [Sat Feb 21 10:57:24.691673 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/community/.env"] [unique_id "aZlJREjxORN6mSk10kY-jQAAAAE"] [Sat Feb 21 10:57:25.308488 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJRcM5vNyyeo5gKbcRiAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0 [Sat Feb 21 10:57:25.308607 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJRcM5vNyyeo5gKbcRiAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0 [Sat Feb 21 10:57:26.057779 2026] [security2:error] [pid 1926602:tid 1926602] [client 50.6.7.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlJRRHl2U-jS0ZSEvYAIgAAAAM"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 10:57:26.057841 2026] [security2:error] [pid 1926602:tid 1926602] [client 50.6.7.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlJRRHl2U-jS0ZSEvYAIgAAAAM"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 10:57:27.166934 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/compose/.env"] [unique_id "aZlJR2hYNZI398ojwTnZDwAAAAk"] [Sat Feb 21 10:57:31.010413 2026] [security2:error] [pid 1930889:tid 1930889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/config/.env.dev"] [unique_id "aZlJS2L6_xZSA4URT4YXigAAAAg"] [Sat Feb 21 10:57:32.247565 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/config/.env.local"] [unique_id "aZlJTGhYNZI398ojwTnZEQAAAAk"] [Sat Feb 21 10:57:33.727754 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/config/.env.production"] [unique_id "aZlJTZOg6Z1aVfSPEOAaSwAAAAA"] [Sat Feb 21 10:57:37.553525 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 10:57:38.794261 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/config/config.yml"] [unique_id "aZlJUmhYNZI398ojwTnZFAAAAAk"] [Sat Feb 21 10:57:46.629312 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ContainerRegistry/.env"] [unique_id "aZlJWgBA6wjZoL6uVnys4QAAAAI"] [Sat Feb 21 10:57:47.883730 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/containers/.env"] [unique_id "aZlJW0jxORN6mSk10kY-mAAAAAE"] [Sat Feb 21 10:57:49.138147 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/content/.env"] [unique_id "aZlJXcHYh9vEh09pC4OIHAAAAAY"] [Sat Feb 21 10:57:50.415159 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/control/.env"] [unique_id "aZlJXmhYNZI398ojwTnZGQAAAAk"] [Sat Feb 21 10:57:51.794821 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/core/app/.env"] [unique_id "aZlJX8HYh9vEh09pC4OIHQAAAAY"] [Sat Feb 21 10:57:53.211618 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/core/Datavase/.env"] [unique_id "aZlJYWhYNZI398ojwTnZGgAAAAk"] [Sat Feb 21 10:57:54.494878 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/core/persistence/.env"] [unique_id "aZlJYsHYh9vEh09pC4OIHgAAAAY"] [Sat Feb 21 10:57:55.815322 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "aZlJYxHl2U-jS0ZSEvYAMgAAAAM"] [Sat Feb 21 10:57:57.199438 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/counterblockd/.env"] [unique_id "aZlJZYXWYBQ8sX5nXL9dOgAAAAQ"] [Sat Feb 21 10:57:58.500367 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/counterwallet/.env"] [unique_id "aZlJZgQTYp1FL95ygPhOngAAAAU"] [Sat Feb 21 10:57:59.829090 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cp/.env"] [unique_id "aZlJZxHl2U-jS0ZSEvYANAAAAAM"] [Sat Feb 21 10:58:01.160690 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cronlab/.env"] [unique_id "aZlJaYXWYBQ8sX5nXL9dPAAAAAQ"] [Sat Feb 21 10:58:02.594401 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/cryo_project/.env"] [unique_id "aZlJahHl2U-jS0ZSEvYANQAAAAM"] [Sat Feb 21 10:58:03.980690 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/css/.env"] [unique_id "aZlJa8HYh9vEh09pC4OIIwAAAAY"] [Sat Feb 21 10:58:04.083806 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:58:05.386841 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/custom/.env"] [unique_id "aZlJbcM5vNyyeo5gKbcRngAAAAc"] [Sat Feb 21 10:58:06.747652 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/d/.env"] [unique_id "aZlJboXWYBQ8sX5nXL9dQAAAAAQ"] [Sat Feb 21 10:58:13.093056 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/data/.env"] [unique_id "aZlJdZOg6Z1aVfSPEOAaYgAAAAA"] [Sat Feb 21 10:58:14.325586 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/database/.env"] [unique_id "aZlJdgBA6wjZoL6uVnys8wAAAAI"] [Sat Feb 21 10:58:15.641471 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dataset1/.env"] [unique_id "aZlJd2M-kOlwXmZZvLvWpAAAAAo"] [Sat Feb 21 10:58:17.009765 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dataset2/.env"] [unique_id "aZlJeQBA6wjZoL6uVnys9AAAAAI"] [Sat Feb 21 10:58:20.664614 2026] [security2:error] [pid 1926783:tid 1926783] [client 72.249.68.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlJe8M5vNyyeo5gKbcRpQAAAAc"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 10:58:20.664691 2026] [security2:error] [pid 1926783:tid 1926783] [client 72.249.68.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlJe8M5vNyyeo5gKbcRpQAAAAc"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 10:58:21.071839 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/db.sql"] [unique_id "aZlJfRHl2U-jS0ZSEvYAQQAAAAM"] [Sat Feb 21 10:58:22.372952 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/db_backup.sql"] [unique_id "aZlJfsM5vNyyeo5gKbcRpgAAAAc"] [Sat Feb 21 10:58:27.046138 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/debug.log"] [unique_id "aZlJgxHl2U-jS0ZSEvYARAAAAAM"] [Sat Feb 21 10:58:27.719485 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJg8HYh9vEh09pC4OIMgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 10:58:27.719574 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJg8HYh9vEh09pC4OIMgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 10:58:33.381795 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/default/.env"] [unique_id "aZlJiQBA6wjZoL6uVnys_AAAAAI"] [Sat Feb 21 10:58:34.638454 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/delivery/.env"] [unique_id "aZlJimhYNZI398ojwTnZMwAAAAk"] [Sat Feb 21 10:58:35.879489 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/demo-app/.env"] [unique_id "aZlJiwQTYp1FL95ygPhOswAAAAU"] [Sat Feb 21 10:58:37.338273 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/demo/.env"] [unique_id "aZlJjQBA6wjZoL6uVnys_gAAAAI"] [Sat Feb 21 10:58:41.153681 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/deploy/.env"] [unique_id "aZlJkcHYh9vEh09pC4OIOAAAAAY"] [Sat Feb 21 10:58:44.894622 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dev-env/.env"] [unique_id "aZlJlGhYNZI398ojwTnZOAAAAAk"] [Sat Feb 21 10:58:47.450435 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dev/.env.local"] [unique_id "aZlJl2hYNZI398ojwTnZOQAAAAk"] [Sat Feb 21 10:58:48.802718 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dev_env/.env"] [unique_id "aZlJmGM-kOlwXmZZvLvWsgAAAAo"] [Sat Feb 21 10:58:51.317302 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/developer/.env"] [unique_id "aZlJm2M-kOlwXmZZvLvWswAAAAo"] [Sat Feb 21 10:58:52.620598 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/developerslv/.env"] [unique_id "aZlJnMM5vNyyeo5gKbcRuAAAAAc"] [Sat Feb 21 10:58:53.900054 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/development/.env"] [unique_id "aZlJncHYh9vEh09pC4OIPgAAAAY"] [Sat Feb 21 10:58:57.797879 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/directories/.env"] [unique_id "aZlJoZOg6Z1aVfSPEOAafQAAAAA"] [Sat Feb 21 10:58:58.997898 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dist/.env"] [unique_id "aZlJokjxORN6mSk10kY-ugAAAAE"] [Sat Feb 21 10:59:01.979063 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/django-blog/.env"] [unique_id "aZlJpUjxORN6mSk10kY-uwAAAAE"] [Sat Feb 21 10:59:03.333192 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/django/.env"] [unique_id "aZlJpwBA6wjZoL6uVnytDQAAAAI"] [Sat Feb 21 10:59:04.739349 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/django_project_path/.env"] [unique_id "aZlJqGM-kOlwXmZZvLvWuwAAAAo"] [Sat Feb 21 10:59:06.031274 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlJqGM-kOlwXmZZvLvWuwAAAAo"] [Sat Feb 21 10:59:06.031336 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlJqGM-kOlwXmZZvLvWuwAAAAo"] [Sat Feb 21 10:59:06.103712 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/doc/.env"] [unique_id "aZlJqmhYNZI398ojwTnZRQAAAAk"] [Sat Feb 21 10:59:08.764150 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker-compose/.env"] [unique_id "aZlJrEjxORN6mSk10kY-vwAAAAE"] [Sat Feb 21 10:59:10.082484 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker-compose/platform/.env"] [unique_id "aZlJrsHYh9vEh09pC4OIRgAAAAY"] [Sat Feb 21 10:59:10.696409 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJrmhYNZI398ojwTnZRwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fsubsystem%2Floop1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1 [Sat Feb 21 10:59:10.696482 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJrmhYNZI398ojwTnZRwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fsubsystem%2Floop1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1 [Sat Feb 21 10:59:11.407696 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker-elk/.env"] [unique_id "aZlJr0jxORN6mSk10kY-wAAAAAE"] [Sat Feb 21 10:59:12.611439 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "aZlJsGM-kOlwXmZZvLvWvwAAAAo"] [Sat Feb 21 10:59:13.827416 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "aZlJsYXWYBQ8sX5nXL9daQAAAAQ"] [Sat Feb 21 10:59:13.915811 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJsWhYNZI398ojwTnZSQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 10:59:13.915880 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJsWhYNZI398ojwTnZSQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 10:59:15.036826 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "aZlJs2M-kOlwXmZZvLvWwAAAAAo"] [Sat Feb 21 10:59:16.342053 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "aZlJtMHYh9vEh09pC4OISQAAAAY"] [Sat Feb 21 10:59:17.726376 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/database/.env"] [unique_id "aZlJtQBA6wjZoL6uVnytFAAAAAI"] [Sat Feb 21 10:59:19.108682 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/db/.env"] [unique_id "aZlJt8HYh9vEh09pC4OISgAAAAY"] [Sat Feb 21 10:59:20.474435 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/dev/.env"] [unique_id "aZlJuGhYNZI398ojwTnZTQAAAAk"] [Sat Feb 21 10:59:21.716073 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/examples/compose/.env"] [unique_id "aZlJuRHl2U-jS0ZSEvYAYwAAAAM"] [Sat Feb 21 10:59:23.031869 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/postgres/.env"] [unique_id "aZlJu8HYh9vEh09pC4OITAAAAAY"] [Sat Feb 21 10:59:24.331237 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docker/webdav/.env"] [unique_id "aZlJvGM-kOlwXmZZvLvWxQAAAAo"] [Sat Feb 21 10:59:26.712396 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/docs/.env"] [unique_id "aZlJvoXWYBQ8sX5nXL9dbwAAAAQ"] [Sat Feb 21 10:59:28.008406 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dodoswap-client/.env"] [unique_id "aZlJwJOg6Z1aVfSPEOAajwAAAAA"] [Sat Feb 21 10:59:29.279826 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/dotfiles/.env"] [unique_id "aZlJwWhYNZI398ojwTnZUgAAAAk"] [Sat Feb 21 10:59:30.514648 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /download/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/download/.env"] [unique_id "aZlJwsM5vNyyeo5gKbcRzQAAAAc"] [Sat Feb 21 10:59:32.143480 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/downloads/.env"] [unique_id "aZlJxGM-kOlwXmZZvLvWyAAAAAo"] [Sat Feb 21 10:59:33.489088 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/drupal/.env"] [unique_id "aZlJxUjxORN6mSk10kY-zQAAAAE"] [Sat Feb 21 10:59:34.731659 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/dump.sql"] [unique_id "aZlJxgBA6wjZoL6uVnytHQAAAAI"] [Sat Feb 21 10:59:36.038038 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/e2e/.env"] [unique_id "aZlJyGhYNZI398ojwTnZVQAAAAk"] [Sat Feb 21 10:59:37.321483 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/en/.env"] [unique_id "aZlJyUjxORN6mSk10kY-zwAAAAE"] [Sat Feb 21 10:59:37.564714 2026] [security2:error] [pid 1926783:tid 1926783] [client 66.249.68.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlJycM5vNyyeo5gKbcR0AAAAAc"] [Sat Feb 21 10:59:37.564786 2026] [security2:error] [pid 1926783:tid 1926783] [client 66.249.68.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlJycM5vNyyeo5gKbcR0AAAAAc"] [Sat Feb 21 10:59:38.701049 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /engine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/engine/.env"] [unique_id "aZlJysHYh9vEh09pC4OIVQAAAAY"] [Sat Feb 21 10:59:44.016484 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "aZlJ0MM5vNyyeo5gKbcR1AAAAAc"] [Sat Feb 21 10:59:45.309157 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "aZlJ0QQTYp1FL95ygPhO2AAAAAU"] [Sat Feb 21 10:59:46.496669 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/env/example/.env"] [unique_id "aZlJ0hHl2U-jS0ZSEvYAcQAAAAM"] [Sat Feb 21 10:59:47.878789 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/env/template/.env"] [unique_id "aZlJ08HYh9vEh09pC4OIWgAAAAY"] [Sat Feb 21 10:59:49.165049 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/environments/local/.env"] [unique_id "aZlJ1cM5vNyyeo5gKbcR1wAAAAc"] [Sat Feb 21 10:59:50.461886 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/environments/production/.env"] [unique_id "aZlJ1sHYh9vEh09pC4OIWwAAAAY"] [Sat Feb 21 10:59:51.558787 2026] [access_compat:error] [pid 1926619:tid 1926619] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 10:59:51.877830 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /envs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/envs/.env"] [unique_id "aZlJ1xHl2U-jS0ZSEvYAdAAAAAM"] [Sat Feb 21 10:59:53.332447 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/error.log"] [unique_id "aZlJ2ZOg6Z1aVfSPEOAangAAAAA"] [Sat Feb 21 10:59:54.767275 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/error/.env"] [unique_id "aZlJ2hHl2U-jS0ZSEvYAdQAAAAM"] [Sat Feb 21 10:59:55.979040 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/errors/.env"] [unique_id "aZlJ20jxORN6mSk10kY-2QAAAAE"] [Sat Feb 21 10:59:57.254500 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/example/.env"] [unique_id "aZlJ3ZOg6Z1aVfSPEOAaoAAAAAA"] [Sat Feb 21 10:59:58.582502 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "aZlJ3gQTYp1FL95ygPhO4AAAAAU"] [Sat Feb 21 10:59:59.907365 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "aZlJ34XWYBQ8sX5nXL9dfgAAAAQ"] [Sat Feb 21 11:00:01.333482 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "aZlJ4RHl2U-jS0ZSEvYAeAAAAAM"] [Sat Feb 21 11:00:03.321537 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/.env"] [unique_id "aZlJ44XWYBQ8sX5nXL9dfwAAAAQ"] [Sat Feb 21 11:00:05.136848 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/01-simple-model/.env"] [unique_id "aZlJ5WM-kOlwXmZZvLvW2wAAAAo"] [Sat Feb 21 11:00:06.763177 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/02-complex-example/.env"] [unique_id "aZlJ5pOg6Z1aVfSPEOAapAAAAAA"] [Sat Feb 21 11:00:08.397441 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "aZlJ6AQTYp1FL95ygPhO5AAAAAU"] [Sat Feb 21 11:00:09.880214 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "aZlJ6YXWYBQ8sX5nXL9dggAAAAQ"] [Sat Feb 21 11:00:11.460659 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/05-migrations/.env"] [unique_id "aZlJ62hYNZI398ojwTnZZwAAAAk"] [Sat Feb 21 11:00:11.993869 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJ6xHl2U-jS0ZSEvYAfQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:00:11.993926 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJ6xHl2U-jS0ZSEvYAfQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:00:12.999993 2026] [security2:error] [pid 1926619:tid 1926619] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/06-base-service/.env"] [unique_id "aZlJ7AQTYp1FL95ygPhO5gAAAAU"] [Sat Feb 21 11:00:14.548631 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "aZlJ7mM-kOlwXmZZvLvW4AAAAAo"] [Sat Feb 21 11:00:16.224789 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/08-performance/.env"] [unique_id "aZlJ8GoVyMVcfJ9uH8aigwAAAAg"] [Sat Feb 21 11:00:17.813074 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/09-production/.env"] [unique_id "aZlJ8QBA6wjZoL6uVnytLQAAAAI"] [Sat Feb 21 11:00:19.342522 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "aZlJ80jxORN6mSk10kY-5AAAAAE"] [Sat Feb 21 11:00:20.730999 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:00:20.818723 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/11-transactions/.env"] [unique_id "aZlJ9BHl2U-jS0ZSEvYAgQAAAAM"] [Sat Feb 21 11:00:22.222058 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "aZlJ9pOg6Z1aVfSPEOAaqwAAAAA"] [Sat Feb 21 11:00:23.807725 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "aZlJ94XWYBQ8sX5nXL9diAAAAAQ"] [Sat Feb 21 11:00:24.743925 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJ-MM5vNyyeo5gKbcR6gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 11:00:24.744004 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlJ-MM5vNyyeo5gKbcR6gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 11:00:26.332731 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/sdl-first/.env"] [unique_id "aZlJ-mhYNZI398ojwTnZbgAAAAk"] [Sat Feb 21 11:00:27.707342 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "aZlJ-xHl2U-jS0ZSEvYAhAAAAAM"] [Sat Feb 21 11:00:29.385121 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "aZlJ_WM-kOlwXmZZvLvW5wAAAAo"] [Sat Feb 21 11:00:30.884982 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/web/.env"] [unique_id "aZlJ_pOg6Z1aVfSPEOAarwAAAAA"] [Sat Feb 21 11:00:32.351106 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "aZlKAGM-kOlwXmZZvLvW6AAAAAo"] [Sat Feb 21 11:00:33.831740 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/with-dotenv/.env"] [unique_id "aZlKAcHYh9vEh09pC4OIcwAAAAY"] [Sat Feb 21 11:00:35.263884 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "aZlKA5Og6Z1aVfSPEOAasQAAAAA"] [Sat Feb 21 11:00:36.623227 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "aZlKBGM-kOlwXmZZvLvW6gAAAAo"] [Sat Feb 21 11:00:38.147681 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "aZlKBsM5vNyyeo5gKbcR8wAAAAc"] [Sat Feb 21 11:00:39.598985 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "aZlKB2M-kOlwXmZZvLvW6wAAAAo"] [Sat Feb 21 11:00:41.010518 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/exapi/.env"] [unique_id "aZlKCQBA6wjZoL6uVnytOgAAAAI"] [Sat Feb 21 11:00:42.425367 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Exercise.Frontend/.env"] [unique_id "aZlKCkjxORN6mSk10kY-7gAAAAE"] [Sat Feb 21 11:00:43.826035 2026] [security2:error] [pid 1934779:tid 1934779] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZlKC4evQJIhnqO1zKNfqwAAAAU"] [Sat Feb 21 11:00:45.542543 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/export/.env"] [unique_id "aZlKDWoVyMVcfJ9uH8aikAAAAAg"] [Sat Feb 21 11:00:47.138997 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fastlane/.env"] [unique_id "aZlKDxHl2U-jS0ZSEvYAjgAAAAM"] [Sat Feb 21 11:00:48.443906 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/favicons/.env"] [unique_id "aZlKEABA6wjZoL6uVnytPQAAAAI"] [Sat Feb 21 11:00:49.735489 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/favs/.env"] [unique_id "aZlKEYXWYBQ8sX5nXL9dlAAAAAQ"] [Sat Feb 21 11:00:51.164740 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/FE/huey/.env"] [unique_id "aZlKE2hYNZI398ojwTnZegAAAAk"] [Sat Feb 21 11:00:52.852711 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fedex/.env"] [unique_id "aZlKFMHYh9vEh09pC4OIfAAAAAY"] [Sat Feb 21 11:00:54.325563 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fhir-api/.env"] [unique_id "aZlKFpOg6Z1aVfSPEOAaugAAAAA"] [Sat Feb 21 11:00:55.288221 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKFwBA6wjZoL6uVnytQAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:00:55.288302 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKFwBA6wjZoL6uVnytQAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:00:55.638404 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/files/.env"] [unique_id "aZlKF8M5vNyyeo5gKbcR-wAAAAc"] [Sat Feb 21 11:00:56.947568 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fileserver/.env"] [unique_id "aZlKGEjxORN6mSk10kY-9QAAAAE"] [Sat Feb 21 11:00:58.383906 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/films/.env"] [unique_id "aZlKGpOg6Z1aVfSPEOAavAAAAAA"] [Sat Feb 21 11:00:59.877997 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "aZlKGwBA6wjZoL6uVnytQwAAAAI"] [Sat Feb 21 11:01:01.319142 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "aZlKHUjxORN6mSk10kY-9wAAAAE"] [Sat Feb 21 11:01:03.020272 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZlKHwBA6wjZoL6uVnytRAAAAAI"] [Sat Feb 21 11:01:04.526681 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "aZlKIMM5vNyyeo5gKbcSAAAAAAc"] [Sat Feb 21 11:01:05.202939 2026] [core:error] [pid 1934779:tid 1934779] [client 104.210.140.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:01:05.203044 2026] [core:error] [pid 1934779:tid 1934779] [client 104.210.140.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:01:07.700724 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/first-network/.env"] [unique_id "aZlKI2M-kOlwXmZZvLvW9wAAAAo"] [Sat Feb 21 11:01:09.358838 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "aZlKJQBA6wjZoL6uVnytSAAAAAI"] [Sat Feb 21 11:01:10.719703 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fisdom/fisdom/.env"] [unique_id "aZlKJmhYNZI398ojwTnZhgAAAAk"] [Sat Feb 21 11:01:11.924098 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fixtures/blocks/.env"] [unique_id "aZlKJwBA6wjZoL6uVnytSQAAAAI"] [Sat Feb 21 11:01:13.381256 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "aZlKKYXWYBQ8sX5nXL9doAAAAAQ"] [Sat Feb 21 11:01:14.716388 2026] [security2:error] [pid 1929066:tid 1929066] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fixtures/flight/.env"] [unique_id "aZlKKmhYNZI398ojwTnZiAAAAAk"] [Sat Feb 21 11:01:16.039064 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "aZlKLBHl2U-jS0ZSEvYAnAAAAAM"] [Sat Feb 21 11:01:17.312217 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/flask/.env"] [unique_id "aZlKLcHYh9vEh09pC4OIigAAAAY"] [Sat Feb 21 11:01:18.796940 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:01:18.829366 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/flask_test_uploads/.env"] [unique_id "aZlKLmM-kOlwXmZZvLvW_QAAAAo"] [Sat Feb 21 11:01:20.430643 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fm/.env"] [unique_id "aZlKMMHYh9vEh09pC4OIiwAAAAY"] [Sat Feb 21 11:01:21.790219 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/font-icons/.env"] [unique_id "aZlKMWoVyMVcfJ9uH8aipAAAAAg"] [Sat Feb 21 11:01:22.006131 2026] [access_compat:error] [pid 1926596:tid 1926596] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:01:23.238922 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/fonts/.env"] [unique_id "aZlKM8HYh9vEh09pC4OIjQAAAAY"] [Sat Feb 21 11:01:24.623472 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /framework/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/framework/.env"] [unique_id "aZlKNGM-kOlwXmZZvLvXAQAAAAo"] [Sat Feb 21 11:01:25.489410 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKNWhYNZI398ojwTnZjwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 11:01:25.489516 2026] [security2:error] [pid 1929066:tid 1929066] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKNWhYNZI398ojwTnZjwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 11:01:26.808971 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:01:26.872859 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/front-app/.env"] [unique_id "aZlKNkjxORN6mSk10kY_AwAAAAE"] [Sat Feb 21 11:01:28.402554 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/front-empathy/.env"] [unique_id "aZlKOF7N2x2Af1vETfMjUgAAAAU"] [Sat Feb 21 11:01:29.813006 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/front-end/.env"] [unique_id "aZlKOcM5vNyyeo5gKbcSDwAAAAc"] [Sat Feb 21 11:01:31.315236 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/front/.env"] [unique_id "aZlKOwBA6wjZoL6uVnytVAAAAAI"] [Sat Feb 21 11:01:32.767093 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/front/src/.env"] [unique_id "aZlKPEjxORN6mSk10kY_BgAAAAE"] [Sat Feb 21 11:01:34.248394 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "aZlKPgBA6wjZoL6uVnytVQAAAAI"] [Sat Feb 21 11:01:35.545626 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/frontend/react/.env"] [unique_id "aZlKP0jxORN6mSk10kY_BwAAAAE"] [Sat Feb 21 11:01:36.843412 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/frontend/vue/.env"] [unique_id "aZlKQABA6wjZoL6uVnytVgAAAAI"] [Sat Feb 21 11:01:39.773819 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/frontendfinaltest/.env"] [unique_id "aZlKQwBA6wjZoL6uVnytVwAAAAI"] [Sat Feb 21 11:01:41.234049 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ftp/.env"] [unique_id "aZlKRUjxORN6mSk10kY_CQAAAAE"] [Sat Feb 21 11:01:42.642605 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ftpmaster/.env"] [unique_id "aZlKRl7N2x2Af1vETfMjWgAAAAU"] [Sat Feb 21 11:01:44.114241 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /functions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/functions/.env"] [unique_id "aZlKSBHl2U-jS0ZSEvYArAAAAAM"] [Sat Feb 21 11:01:46.850188 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gcp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/gcp/.env"] [unique_id "aZlKShHl2U-jS0ZSEvYArQAAAAM"] [Sat Feb 21 11:01:52.494272 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/github-connect/.env"] [unique_id "aZlKUMHYh9vEh09pC4OInwAAAAY"] [Sat Feb 21 11:01:53.733945 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /google/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/google/.env"] [unique_id "aZlKUUjxORN6mSk10kY_EAAAAAE"] [Sat Feb 21 11:01:57.695785 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/grems-api/.env"] [unique_id "aZlKVWM-kOlwXmZZvLvXFwAAAAo"] [Sat Feb 21 11:01:59.333106 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/grems-frontend/.env"] [unique_id "aZlKV8HYh9vEh09pC4OIowAAAAY"] [Sat Feb 21 11:02:00.717135 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Hash/.env"] [unique_id "aZlKWMM5vNyyeo5gKbcSIgAAAAc"] [Sat Feb 21 11:02:02.329461 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/hasura/.env"] [unique_id "aZlKWmM-kOlwXmZZvLvXGQAAAAo"] [Sat Feb 21 11:02:05.163109 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Helmetjs/.env"] [unique_id "aZlKXWM-kOlwXmZZvLvXGgAAAAo"] [Sat Feb 21 11:02:06.414201 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/hgs-static/.env"] [unique_id "aZlKXgBA6wjZoL6uVnytZwAAAAI"] [Sat Feb 21 11:02:07.757628 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/higlass-website/.env"] [unique_id "aZlKX4XWYBQ8sX5nXL9duwAAAAQ"] [Sat Feb 21 11:02:09.353112 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/home/.env"] [unique_id "aZlKYcM5vNyyeo5gKbcSJwAAAAc"] [Sat Feb 21 11:02:10.768093 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/horde/.env"] [unique_id "aZlKYl7N2x2Af1vETfMjagAAAAU"] [Sat Feb 21 11:02:12.099747 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "aZlKZEjxORN6mSk10kY_HAAAAAE"] [Sat Feb 21 11:02:13.394569 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/htdocs/.env"] [unique_id "aZlKZWoVyMVcfJ9uH8aixQAAAAg"] [Sat Feb 21 11:02:14.724886 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/html/.env"] [unique_id "aZlKZkjxORN6mSk10kY_HQAAAAE"] [Sat Feb 21 11:02:16.219939 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/http/.env"] [unique_id "aZlKaGoVyMVcfJ9uH8aixgAAAAg"] [Sat Feb 21 11:02:17.662049 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/httpboot/.env"] [unique_id "aZlKaUjxORN6mSk10kY_HgAAAAE"] [Sat Feb 21 11:02:19.020316 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/httpdocs/.env"] [unique_id "aZlKa2oVyMVcfJ9uH8aixwAAAAg"] [Sat Feb 21 11:02:20.452625 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/HUNIV_migration/.env"] [unique_id "aZlKbBHl2U-jS0ZSEvYAvAAAAAM"] [Sat Feb 21 11:02:23.110106 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/icon/.env"] [unique_id "aZlKb5Og6Z1aVfSPEOAa7wAAAAA"] [Sat Feb 21 11:02:24.338883 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/icons/.env"] [unique_id "aZlKcABA6wjZoL6uVnytcgAAAAI"] [Sat Feb 21 11:02:26.825037 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ikiwiki/.env"] [unique_id "aZlKcl7N2x2Af1vETfMjcwAAAAU"] [Sat Feb 21 11:02:28.188280 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/image_data/.env"] [unique_id "aZlKdABA6wjZoL6uVnytcwAAAAI"] [Sat Feb 21 11:02:29.434871 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Imagebord/.env"] [unique_id "aZlKdWM-kOlwXmZZvLvXKAAAAAo"] [Sat Feb 21 11:02:30.774217 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/images/.env"] [unique_id "aZlKdgBA6wjZoL6uVnytdAAAAAI"] [Sat Feb 21 11:02:32.083716 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/img/.env"] [unique_id "aZlKeMM5vNyyeo5gKbcSMQAAAAc"] [Sat Feb 21 11:02:36.361936 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/includes/.env"] [unique_id "aZlKfGM-kOlwXmZZvLvXKwAAAAo"] [Sat Feb 21 11:02:44.940173 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKhEjxORN6mSk10kY_LAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:02:44.940305 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKhEjxORN6mSk10kY_LAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:02:47.952122 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKh8HYh9vEh09pC4OIugAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6 [Sat Feb 21 11:02:47.952189 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKh8HYh9vEh09pC4OIugAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6 [Sat Feb 21 11:02:53.608186 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/install/.env"] [unique_id "aZlKjcHYh9vEh09pC4OIvgAAAAY"] [Sat Feb 21 11:02:54.817661 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/InstantCV/server/.env"] [unique_id "aZlKjpOg6Z1aVfSPEOAbAgAAAAA"] [Sat Feb 21 11:03:01.337104 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/items/.env"] [unique_id "aZlKlWM-kOlwXmZZvLvXOgAAAAo"] [Sat Feb 21 11:03:02.822408 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKlkjxORN6mSk10kY_MwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:03:02.822501 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKlkjxORN6mSk10kY_MwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:03:02.828017 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/javascript/.env"] [unique_id "aZlKll7N2x2Af1vETfMjhwAAAAU"] [Sat Feb 21 11:03:04.322974 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jenkins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/jenkins/.env"] [unique_id "aZlKmIXWYBQ8sX5nXL9d2QAAAAQ"] [Sat Feb 21 11:03:06.597010 2026] [security2:error] [pid 1926591:tid 1926591] [client 190.92.175.228:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlKmZOg6Z1aVfSPEOAbCAAAAAA"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:03:06.597065 2026] [security2:error] [pid 1926591:tid 1926591] [client 190.92.175.228:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlKmZOg6Z1aVfSPEOAbCAAAAAA"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:03:07.337294 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/joomla/.env"] [unique_id "aZlKm0jxORN6mSk10kY_NgAAAAE"] [Sat Feb 21 11:03:08.842958 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js-plugin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/js-plugin/.env"] [unique_id "aZlKnIXWYBQ8sX5nXL9d2wAAAAQ"] [Sat Feb 21 11:03:14.945608 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKomM-kOlwXmZZvLvXQQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:03:14.945718 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKomM-kOlwXmZZvLvXQQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:03:19.619530 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jsrelay/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/jsrelay/.env"] [unique_id "aZlKp8M5vNyyeo5gKbcSSQAAAAc"] [Sat Feb 21 11:03:21.102164 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jupyter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/jupyter/.env"] [unique_id "aZlKqYXWYBQ8sX5nXL9d4QAAAAQ"] [Sat Feb 21 11:03:22.512762 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /khanlinks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/khanlinks/.env"] [unique_id "aZlKqgBA6wjZoL6uVnytkQAAAAI"] [Sat Feb 21 11:03:23.802239 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kibana/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/kibana/.env"] [unique_id "aZlKq0jxORN6mSk10kY_PgAAAAE"] [Sat Feb 21 11:03:26.157428 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kodenames-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/kodenames-server/.env"] [unique_id "aZlKrhHl2U-jS0ZSEvYA4AAAAAM"] [Sat Feb 21 11:03:27.419745 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kolab-syncroton/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/kolab-syncroton/.env"] [unique_id "aZlKr8M5vNyyeo5gKbcSTQAAAAc"] [Sat Feb 21 11:03:28.754273 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Kubernetes/.env"] [unique_id "aZlKsGM-kOlwXmZZvLvXSQAAAAo"] [Sat Feb 21 11:03:30.070915 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/kubernetes/.env"] [unique_id "aZlKsoXWYBQ8sX5nXL9d5QAAAAQ"] [Sat Feb 21 11:03:32.698004 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/lab/.env"] [unique_id "aZlKtIXWYBQ8sX5nXL9d5gAAAAQ"] [Sat Feb 21 11:03:33.920638 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/lambda/.env"] [unique_id "aZlKtZOg6Z1aVfSPEOAbFAAAAAA"] [Sat Feb 21 11:03:34.071042 2026] [access_compat:error] [pid 1926596:tid 1926596] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:03:35.281975 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /latest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/latest/.env"] [unique_id "aZlKt4XWYBQ8sX5nXL9d5wAAAAQ"] [Sat Feb 21 11:03:36.614949 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /layout/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/layout/.env"] [unique_id "aZlKuGoVyMVcfJ9uH8ai8QAAAAg"] [Sat Feb 21 11:03:37.893580 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/lcomernbootcamp/projbackend/.env"] [unique_id "aZlKucM5vNyyeo5gKbcSUwAAAAc"] [Sat Feb 21 11:03:39.208065 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /leafer-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/leafer-app/.env"] [unique_id "aZlKu8HYh9vEh09pC4OI1wAAAAY"] [Sat Feb 21 11:03:40.569946 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ledger_sync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ledger_sync/.env"] [unique_id "aZlKvF7N2x2Af1vETfMjnAAAAAU"] [Sat Feb 21 11:03:44.533756 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /legal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/legal/.env"] [unique_id "aZlKwEjxORN6mSk10kY_SAAAAAE"] [Sat Feb 21 11:03:44.896244 2026] [security2:error] [pid 1926664:tid 1926664] [client 127.0.0.1:56638] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cloudbhc.clouditzone.com"] [uri "/.git/config"] [unique_id "aZlKwMHYh9vEh09pC4OI2QAAAAY"] [Sat Feb 21 11:03:45.890303 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/lemonldap-ng-doc/.env"] [unique_id "aZlKwZOg6Z1aVfSPEOAbGgAAAAA"] [Sat Feb 21 11:03:47.230399 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-fr-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "aZlKw2oVyMVcfJ9uH8ai9gAAAAg"] [Sat Feb 21 11:03:48.488288 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /letsencrypt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/letsencrypt/.env"] [unique_id "aZlKxIXWYBQ8sX5nXL9d7gAAAAQ"] [Sat Feb 21 11:03:49.859333 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/lib/.env"] [unique_id "aZlKxQBA6wjZoL6uVnytoAAAAAI"] [Sat Feb 21 11:03:52.523811 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libraries/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/libraries/.env"] [unique_id "aZlKyGM-kOlwXmZZvLvXVgAAAAo"] [Sat Feb 21 11:03:53.840186 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Library/.env"] [unique_id "aZlKyUjxORN6mSk10kY_TQAAAAE"] [Sat Feb 21 11:03:54.218894 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKygBA6wjZoL6uVnytogAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:03:54.218971 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlKygBA6wjZoL6uVnytogAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:03:55.114841 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/libs/.env"] [unique_id "aZlKy2M-kOlwXmZZvLvXVwAAAAo"] [Sat Feb 21 11:03:59.582006 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /linux/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/linux/.env"] [unique_id "aZlKzxHl2U-jS0ZSEvYA8gAAAAM"] [Sat Feb 21 11:04:02.489772 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /localhost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/localhost/.env"] [unique_id "aZlK0pOg6Z1aVfSPEOAbJAAAAAA"] [Sat Feb 21 11:04:04.003258 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /locally/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/locally/.env"] [unique_id "aZlK1BHl2U-jS0ZSEvYA9AAAAAM"] [Sat Feb 21 11:04:06.776833 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /log/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/log/.env"] [unique_id "aZlK1hHl2U-jS0ZSEvYA9QAAAAM"] [Sat Feb 21 11:04:08.140527 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/log/development.log"] [unique_id "aZlK2GoVyMVcfJ9uH8ajAgAAAAg"] [Sat Feb 21 11:04:09.290551 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/logging/.env"] [unique_id "aZlK2cHYh9vEh09pC4OI5gAAAAY"] [Sat Feb 21 11:04:12.813484 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/login/.env"] [unique_id "aZlK3F7N2x2Af1vETfMjsQAAAAU"] [Sat Feb 21 11:04:15.441178 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlK3wBA6wjZoL6uVnytrQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:04:15.441293 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlK3wBA6wjZoL6uVnytrQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:04:15.477665 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/logs/.env"] [unique_id "aZlK317N2x2Af1vETfMjsgAAAAU"] [Sat Feb 21 11:04:16.785623 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/logs/access.log"] [unique_id "aZlK4IXWYBQ8sX5nXL9d_wAAAAQ"] [Sat Feb 21 11:04:18.225482 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/logs/app.log"] [unique_id "aZlK4gBA6wjZoL6uVnytrwAAAAI"] [Sat Feb 21 11:04:19.522346 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/logs/error.log"] [unique_id "aZlK40jxORN6mSk10kY_XAAAAAE"] [Sat Feb 21 11:04:20.997952 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/magento/.env"] [unique_id "aZlK5MHYh9vEh09pC4OI7AAAAAY"] [Sat Feb 21 11:04:22.350683 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailinabox/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mailinabox/.env"] [unique_id "aZlK5pOg6Z1aVfSPEOAbLgAAAAA"] [Sat Feb 21 11:04:23.775923 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailman/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mailman/.env"] [unique_id "aZlK58M5vNyyeo5gKbcSagAAAAc"] [Sat Feb 21 11:04:23.776312 2026] [cgi:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] AH02811: stderr from /usr/local/cpanel/3rdparty/mailman/cgi-bin/.env: script not found or unable to stat [Sat Feb 21 11:04:23.776428 2026] [core:crit] [pid 1926783:tid 1926783] (13)Permission denied: [client 185.177.72.13:0] AH00529: /home/arcticairandrefr/public_html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/arcticairandrefr/public_html/' is executable [Sat Feb 21 11:04:30.938853 2026] [autoindex:error] [pid 1933844:tid 1933844] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:04:33.257631 2026] [autoindex:error] [pid 1926596:tid 1926596] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:04:38.074014 2026] [cgi:error] [pid 1926599:tid 1926599] [client 20.219.8.79:0] AH02812: stderr from /home/medimage/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 11:04:42.660531 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:04:44.381292 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/main_user/.env"] [unique_id "aZlK_F7N2x2Af1vETfMjwwAAAAU"] [Sat Feb 21 11:04:47.432056 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:04:48.778136 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /manual/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/manual/.env"] [unique_id "aZlLAMM5vNyyeo5gKbcSewAAAAc"] [Sat Feb 21 11:04:50.119389 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /master/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/master/.env"] [unique_id "aZlLAh_VxjWv7hcrM1_cpAAAAAk"] [Sat Feb 21 11:04:51.521177 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/media/.env"] [unique_id "aZlLA17N2x2Af1vETfMjxwAAAAU"] [Sat Feb 21 11:04:52.936902 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /memcached/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/memcached/.env"] [unique_id "aZlLBJOg6Z1aVfSPEOAbQQAAAAA"] [Sat Feb 21 11:04:54.241673 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mentorg-lava-docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mentorg-lava-docker/.env"] [unique_id "aZlLBsHYh9vEh09pC4OI_QAAAAY"] [Sat Feb 21 11:04:54.888066 2026] [autoindex:error] [pid 1931467:tid 1931467] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:04:55.643954 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react-communication/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/micro-app-react-communication/.env"] [unique_id "aZlLB2oVyMVcfJ9uH8ajHgAAAAg"] [Sat Feb 21 11:04:57.019757 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/micro-app-react/.env"] [unique_id "aZlLCV7N2x2Af1vETfMjygAAAAU"] [Sat Feb 21 11:04:57.282538 2026] [autoindex:error] [pid 1926596:tid 1926596] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:04:57.459661 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLCcM5vNyyeo5gKbcSgAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:04:57.459750 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLCcM5vNyyeo5gKbcSgAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:04:58.529179 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mindsweeper/gui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mindsweeper/gui/.env"] [unique_id "aZlLCsHYh9vEh09pC4OI_wAAAAY"] [Sat Feb 21 11:04:59.830945 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /minified/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/minified/.env"] [unique_id "aZlLCwBA6wjZoL6uVnytxwAAAAI"] [Sat Feb 21 11:05:01.377846 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /misc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/misc/.env"] [unique_id "aZlLDUjxORN6mSk10kY_dAAAAAE"] [Sat Feb 21 11:05:02.856448 2026] [autoindex:error] [pid 1931467:tid 1931467] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:05:03.194084 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Modix/ClientApp/.env"] [unique_id "aZlLD2M-kOlwXmZZvLvXfgAAAAo"] [Sat Feb 21 11:05:04.805444 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monerod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/monerod/.env"] [unique_id "aZlLEF7N2x2Af1vETfMjzwAAAAU"] [Sat Feb 21 11:05:05.991606 2026] [autoindex:error] [pid 1926596:tid 1926596] [client 20.219.8.79:0] AH01276: Cannot serve directory /home/medimage/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:05:06.279869 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mongodb/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/mongodb/config/dev/.env"] [unique_id "aZlLEsM5vNyyeo5gKbcShwAAAAc"] [Sat Feb 21 11:05:07.679312 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monitoring/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/monitoring/compose/.env"] [unique_id "aZlLEwBA6wjZoL6uVnytywAAAAI"] [Sat Feb 21 11:05:09.095593 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /moodledata/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/moodledata/.env"] [unique_id "aZlLFV7N2x2Af1vETfMj0QAAAAU"] [Sat Feb 21 11:05:10.565401 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /msks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/msks/.env"] [unique_id "aZlLFsHYh9vEh09pC4OJBAAAAAY"] [Sat Feb 21 11:05:11.811237 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /munki_repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/munki_repo/.env"] [unique_id "aZlLF2M-kOlwXmZZvLvXggAAAAo"] [Sat Feb 21 11:05:13.114195 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /music/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/music/.env"] [unique_id "aZlLGQBA6wjZoL6uVnytzgAAAAI"] [Sat Feb 21 11:05:14.632882 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "aZlLGkjxORN6mSk10kY_ewAAAAE"] [Sat Feb 21 11:05:17.442078 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /name/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/name/.env"] [unique_id "aZlLHR_VxjWv7hcrM1_ctQAAAAk"] [Sat Feb 21 11:05:18.828715 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/nest/.env"] [unique_id "aZlLHkjxORN6mSk10kY_fQAAAAE"] [Sat Feb 21 11:05:21.672400 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new-js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/new-js/.env"] [unique_id "aZlLIQBA6wjZoL6uVnyt0wAAAAI"] [Sat Feb 21 11:05:24.526128 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /news-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/news-app/.env"] [unique_id "aZlLJABA6wjZoL6uVnyt1AAAAAI"] [Sat Feb 21 11:05:26.887478 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/next/.env"] [unique_id "aZlLJl7N2x2Af1vETfMj3AAAAAU"] [Sat Feb 21 11:05:28.238342 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/nginx-server/.env"] [unique_id "aZlLKABA6wjZoL6uVnyt1QAAAAI"] [Sat Feb 21 11:05:29.662075 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /niffler-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/niffler-frontend/.env"] [unique_id "aZlLKcM5vNyyeo5gKbcSlwAAAAc"] [Sat Feb 21 11:05:31.144384 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/node_modules/.env"] [unique_id "aZlLKx_VxjWv7hcrM1_cvQAAAAk"] [Sat Feb 21 11:05:32.515888 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "aZlLLEjxORN6mSk10kY_hAAAAAE"] [Sat Feb 21 11:05:33.880416 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "aZlLLR_VxjWv7hcrM1_cvgAAAAk"] [Sat Feb 21 11:05:35.566544 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /novnc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/noVNC/.env"] [unique_id "aZlLL8M5vNyyeo5gKbcSmgAAAAc"] [Sat Feb 21 11:05:38.216575 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "aZlLMmoVyMVcfJ9uH8ajNQAAAAg"] [Sat Feb 21 11:05:39.704310 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/nuxt/.env"] [unique_id "aZlLM0jxORN6mSk10kY_hwAAAAE"] [Sat Feb 21 11:05:46.542369 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/old/.env"] [unique_id "aZlLOl7N2x2Af1vETfMj5wAAAAU"] [Sat Feb 21 11:05:50.466420 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /oldsanta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/oldsanta/.env"] [unique_id "aZlLPmM-kOlwXmZZvLvXmAAAAAo"] [Sat Feb 21 11:05:51.780105 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opencart/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/opencart/.env"] [unique_id "aZlLPxHl2U-jS0ZSEvYBKgAAAAM"] [Sat Feb 21 11:05:53.124501 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ops/vagrant/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ops/vagrant/.env"] [unique_id "aZlLQQBA6wjZoL6uVnyt4AAAAAI"] [Sat Feb 21 11:05:54.526824 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /option/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/option/.env"] [unique_id "aZlLQsHYh9vEh09pC4OJGQAAAAY"] [Sat Feb 21 11:05:55.718536 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /orientdb-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/orientdb-client/.env"] [unique_id "aZlLQ17N2x2Af1vETfMj7AAAAAU"] [Sat Feb 21 11:05:56.949193 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /outputs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/outputs/.env"] [unique_id "aZlLRGM-kOlwXmZZvLvXmwAAAAo"] [Sat Feb 21 11:05:57.291990 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLRYXWYBQ8sX5nXL9ePQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:05:57.292072 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLRYXWYBQ8sX5nXL9ePQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:05:58.361957 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /owncloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/owncloud/.env"] [unique_id "aZlLRkjxORN6mSk10kY_kAAAAAE"] [Sat Feb 21 11:06:01.140975 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/styled-ui-docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/packages/styled-ui-docs/.env"] [unique_id "aZlLSRHl2U-jS0ZSEvYBLwAAAAM"] [Sat Feb 21 11:06:01.627014 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLScHYh9vEh09pC4OJHQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fpower [Sat Feb 21 11:06:01.627106 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLScHYh9vEh09pC4OJHQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fpower [Sat Feb 21 11:06:02.624606 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/packages/web/.env"] [unique_id "aZlLSsM5vNyyeo5gKbcSqAAAAAc"] [Sat Feb 21 11:06:04.051875 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packed/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/packed/.env"] [unique_id "aZlLTIXWYBQ8sX5nXL9eQQAAAAQ"] [Sat Feb 21 11:06:05.563799 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /page-editor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/page-editor/.env"] [unique_id "aZlLTcM5vNyyeo5gKbcSqQAAAAc"] [Sat Feb 21 11:06:06.841700 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/panel/.env"] [unique_id "aZlLThHl2U-jS0ZSEvYBMQAAAAM"] [Sat Feb 21 11:06:08.026349 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /parity/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/parity/.env"] [unique_id "aZlLUGoVyMVcfJ9uH8ajRAAAAAg"] [Sat Feb 21 11:06:09.464511 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Passportjs/.env"] [unique_id "aZlLURHl2U-jS0ZSEvYBMgAAAAM"] [Sat Feb 21 11:06:10.335308 2026] [access_compat:error] [pid 1926596:tid 1926596] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:06:10.923280 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /patchwork/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/patchwork/.env"] [unique_id "aZlLUgBA6wjZoL6uVnyt6QAAAAI"] [Sat Feb 21 11:06:12.276537 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/path/.env"] [unique_id "aZlLVB_VxjWv7hcrM1_c1AAAAAk"] [Sat Feb 21 11:06:13.570770 2026] [security2:error] [pid 1926591:tid 1926591] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pfbe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/pfbe/.env"] [unique_id "aZlLVZOg6Z1aVfSPEOAbbgAAAAA"] [Sat Feb 21 11:06:14.913393 2026] [authz_core:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] AH01630: client denied by server configuration: /home/arcticairandrefr/public_html/php.ini [Sat Feb 21 11:06:21.130625 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:06:34.131136 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLasHYh9vEh09pC4OJMAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:06:34.131258 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLasHYh9vEh09pC4OJMAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:06:58.449381 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pictures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/pictures/.env"] [unique_id "aZlLgmoVyMVcfJ9uH8ajXwAAAAg"] [Sat Feb 21 11:06:59.744387 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/platform/.env"] [unique_id "aZlLg8M5vNyyeo5gKbcSxgAAAAc"] [Sat Feb 21 11:07:01.122966 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /playground/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/playground/.env"] [unique_id "aZlLhWoVyMVcfJ9uH8ajYAAAAAg"] [Sat Feb 21 11:07:02.697438 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugin_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/plugin_static/.env"] [unique_id "aZlLhoXWYBQ8sX5nXL9eXgAAAAQ"] [Sat Feb 21 11:07:04.086344 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/plugins/.env"] [unique_id "aZlLiABA6wjZoL6uVnyuAAAAAAI"] [Sat Feb 21 11:07:05.416771 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /post-deployment/.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/post-deployment/.vscode/.env"] [unique_id "aZlLiYXWYBQ8sX5nXL9eXwAAAAQ"] [Sat Feb 21 11:07:06.812778 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postfixadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/postfixadmin/.env"] [unique_id "aZlLigBA6wjZoL6uVnyuAQAAAAI"] [Sat Feb 21 11:07:08.224503 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/prestashop/.env"] [unique_id "aZlLjIXWYBQ8sX5nXL9eYAAAAAQ"] [Sat Feb 21 11:07:09.513651 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/preview-env/.env"] [unique_id "aZlLjcHYh9vEh09pC4OJRQAAAAY"] [Sat Feb 21 11:07:10.782885 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/preview/.env"] [unique_id "aZlLjgBA6wjZoL6uVnyuAwAAAAI"] [Sat Feb 21 11:07:12.081136 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /price_hawk_client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/price_hawk_client/.env"] [unique_id "aZlLkMHYh9vEh09pC4OJRgAAAAY"] [Sat Feb 21 11:07:13.316133 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/prisma/.env"] [unique_id "aZlLkcM5vNyyeo5gKbcSzgAAAAc"] [Sat Feb 21 11:07:14.571490 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/private.key"] [unique_id "aZlLkmoVyMVcfJ9uH8ajZwAAAAg"] [Sat Feb 21 11:07:15.842915 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /processor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/processor/.env"] [unique_id "aZlLkwBA6wjZoL6uVnyuBQAAAAI"] [Sat Feb 21 11:07:18.500676 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/prod/.env"] [unique_id "aZlLlhHl2U-jS0ZSEvYBWAAAAAM"] [Sat Feb 21 11:07:19.739408 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/product/.env.staging"] [unique_id "aZlLlx_VxjWv7hcrM1_c-gAAAAk"] [Sat Feb 21 11:07:21.047281 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/projbackend/.env"] [unique_id "aZlLmQBA6wjZoL6uVnyuBwAAAAI"] [Sat Feb 21 11:07:22.504098 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/project/.env"] [unique_id "aZlLmhHl2U-jS0ZSEvYBWgAAAAM"] [Sat Feb 21 11:07:23.857609 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/project_root/.env"] [unique_id "aZlLm8M5vNyyeo5gKbcS1AAAAAc"] [Sat Feb 21 11:07:26.164382 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /protected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/protected/.env"] [unique_id "aZlLnmoVyMVcfJ9uH8ajagAAAAg"] [Sat Feb 21 11:07:27.343219 2026] [security2:error] [pid 1936648:tid 1936648] [client 57.130.20.252:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlLnh_VxjWv7hcrM1_c_gAAAAk"] [Sat Feb 21 11:07:27.343306 2026] [security2:error] [pid 1936648:tid 1936648] [client 57.130.20.252:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlLnh_VxjWv7hcrM1_c_gAAAAk"] [Sat Feb 21 11:07:27.475903 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/psnlink/.env"] [unique_id "aZlLn8M5vNyyeo5gKbcS1QAAAAc"] [Sat Feb 21 11:07:28.746280 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt2/countries/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/pt2/countries/src/.env"] [unique_id "aZlLoGoVyMVcfJ9uH8ajawAAAAg"] [Sat Feb 21 11:07:30.178148 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt8/library-backend-gql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/pt8/library-backend-gql/.env"] [unique_id "aZlLol7N2x2Af1vETfMkGAAAAAU"] [Sat Feb 21 11:07:31.504837 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pub/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/pub/.env"] [unique_id "aZlLo8HYh9vEh09pC4OJUAAAAAY"] [Sat Feb 21 11:07:31.667818 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLo8M5vNyyeo5gKbcS1wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 11:07:31.667923 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLo8M5vNyyeo5gKbcS1wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 11:07:34.177477 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/public_html/.env"] [unique_id "aZlLphHl2U-jS0ZSEvYBYQAAAAM"] [Sat Feb 21 11:07:35.500295 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/public_root/.env"] [unique_id "aZlLp4XWYBQ8sX5nXL9ecAAAAAQ"] [Sat Feb 21 11:07:39.413118 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /question2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/question2/.env"] [unique_id "aZlLq2oVyMVcfJ9uH8ajcAAAAAg"] [Sat Feb 21 11:07:40.760551 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qv-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/qv-frontend/.env"] [unique_id "aZlLrB_VxjWv7hcrM1_dBwAAAAk"] [Sat Feb 21 11:07:42.158121 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rabbitmq-cluster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rabbitmq-cluster/.env"] [unique_id "aZlLroXWYBQ8sX5nXL9ecwAAAAQ"] [Sat Feb 21 11:07:43.420652 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails-api/react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rails-api/react-app/.env"] [unique_id "aZlLr2M-kOlwXmZZvLvX2gAAAAo"] [Sat Feb 21 11:07:44.638470 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rails/.env"] [unique_id "aZlLsF7N2x2Af1vETfMkHwAAAAU"] [Sat Feb 21 11:07:45.869575 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rasax/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rasax/.env"] [unique_id "aZlLsR_VxjWv7hcrM1_dCQAAAAk"] [Sat Feb 21 11:07:47.244962 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/react/.env"] [unique_id "aZlLs4XWYBQ8sX5nXL9edQAAAAQ"] [Sat Feb 21 11:07:47.527676 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLs0jxORN6mSk10kY_yAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:07:47.527777 2026] [security2:error] [pid 1926596:tid 1926596] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLs0jxORN6mSk10kY_yAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:07:48.493596 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react_todo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/react_todo/.env"] [unique_id "aZlLtGoVyMVcfJ9uH8ajdAAAAAg"] [Sat Feb 21 11:07:49.754274 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /redmine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/redmine/.env"] [unique_id "aZlLtcHYh9vEh09pC4OJWQAAAAY"] [Sat Feb 21 11:07:51.029387 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/repo/.env"] [unique_id "aZlLtxHl2U-jS0ZSEvYBagAAAAM"] [Sat Feb 21 11:07:52.496882 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/repos/.env"] [unique_id "aZlLuB_VxjWv7hcrM1_dDAAAAAk"] [Sat Feb 21 11:07:53.995581 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repository/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/repository/.env"] [unique_id "aZlLuYXWYBQ8sX5nXL9eeQAAAAQ"] [Sat Feb 21 11:07:55.393886 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resources/.env"] [unique_id "aZlLux_VxjWv7hcrM1_dDQAAAAk"] [Sat Feb 21 11:07:55.881103 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLu17N2x2Af1vETfMkJQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:07:55.881190 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLu17N2x2Af1vETfMkJQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:07:56.652361 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resources/docker/.env"] [unique_id "aZlLvIXWYBQ8sX5nXL9eegAAAAQ"] [Sat Feb 21 11:07:57.938063 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resources/docker/mysql/.env"] [unique_id "aZlLvR_VxjWv7hcrM1_dDgAAAAk"] [Sat Feb 21 11:07:59.139322 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/phpmyadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resources/docker/phpmyadmin/.env"] [unique_id "aZlLv4XWYBQ8sX5nXL9eewAAAAQ"] [Sat Feb 21 11:08:00.568394 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rabbitmq/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resources/docker/rabbitmq/.env"] [unique_id "aZlLwB_VxjWv7hcrM1_dDwAAAAk"] [Sat Feb 21 11:08:01.941936 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLwcHYh9vEh09pC4OJYAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:08:01.942039 2026] [security2:error] [pid 1926664:tid 1926664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlLwcHYh9vEh09pC4OJYAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:08:02.098057 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rediscommander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resources/docker/rediscommander/.env"] [unique_id "aZlLwl7N2x2Af1vETfMkKQAAAAU"] [Sat Feb 21 11:08:03.448222 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resourcesync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/resourcesync/.env"] [unique_id "aZlLw8HYh9vEh09pC4OJYQAAAAY"] [Sat Feb 21 11:08:06.274677 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rest/.env"] [unique_id "aZlLxkjxORN6mSk10kY_0wAAAAE"] [Sat Feb 21 11:08:07.616382 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /restapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/restapi/.env"] [unique_id "aZlLxx_VxjWv7hcrM1_dEgAAAAk"] [Sat Feb 21 11:08:08.899953 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /results/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/results/.env"] [unique_id "aZlLyBHl2U-jS0ZSEvYBdAAAAAM"] [Sat Feb 21 11:08:11.170445 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /robots/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/robots/.env"] [unique_id "aZlLyxHl2U-jS0ZSEvYBdQAAAAM"] [Sat Feb 21 11:08:13.697418 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/root/.env"] [unique_id "aZlLzUjxORN6mSk10kY_1wAAAAE"] [Sat Feb 21 11:08:14.986767 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rosterback/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rosterBack/.env"] [unique_id "aZlLzl7N2x2Af1vETfMkMAAAAAU"] [Sat Feb 21 11:08:16.296038 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcube/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/roundcube/.env"] [unique_id "aZlL0IXWYBQ8sX5nXL9ehAAAAAQ"] [Sat Feb 21 11:08:17.634624 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcubemail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/roundcubemail/.env"] [unique_id "aZlL0WoVyMVcfJ9uH8ajhAAAAAg"] [Sat Feb 21 11:08:18.939215 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /routes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/routes/.env"] [unique_id "aZlL0oXWYBQ8sX5nXL9ehQAAAAQ"] [Sat Feb 21 11:08:20.191532 2026] [access_compat:error] [pid 1926599:tid 1926599] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:08:20.322781 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /run/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/run/.env"] [unique_id "aZlL1BHl2U-jS0ZSEvYBegAAAAM"] [Sat Feb 21 11:08:21.746915 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rust-backend/.env"] [unique_id "aZlL1cHYh9vEh09pC4OJawAAAAY"] [Sat Feb 21 11:08:23.099627 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/dao/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/rust-backend/dao/.env"] [unique_id "aZlL1xHl2U-jS0ZSEvYBewAAAAM"] [Sat Feb 21 11:08:24.604467 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s-with-me-front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/s-with-me-front/.env"] [unique_id "aZlL2B_VxjWv7hcrM1_dGgAAAAk"] [Sat Feb 21 11:08:26.497021 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlL2moVyMVcfJ9uH8ajiAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7 [Sat Feb 21 11:08:26.497100 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlL2moVyMVcfJ9uH8ajiAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7 [Sat Feb 21 11:08:28.094911 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/saas/.env"] [unique_id "aZlL3MM5vNyyeo5gKbcS8wAAAAc"] [Sat Feb 21 11:08:29.387292 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/chatroom/chatroom-spa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/samples/chatroom/chatroom-spa/.env"] [unique_id "aZlL3WoVyMVcfJ9uH8ajigAAAAg"] [Sat Feb 21 11:08:30.666913 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/docker/deploymentscripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "aZlL3l7N2x2Af1vETfMkOgAAAAU"] [Sat Feb 21 11:08:33.274116 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /script/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/script/.env"] [unique_id "aZlL4UjxORN6mSk10kY_4gAAAAE"] [Sat Feb 21 11:08:34.574249 2026] [security2:error] [pid 1926602:tid 1926602] [client 50.6.174.25:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlL4RHl2U-jS0ZSEvYBgAAAAAM"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:08:34.574314 2026] [security2:error] [pid 1926602:tid 1926602] [client 50.6.174.25:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlL4RHl2U-jS0ZSEvYBgAAAAAM"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:08:34.836291 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/scripts/.env"] [unique_id "aZlL4l7N2x2Af1vETfMkPAAAAAU"] [Sat Feb 21 11:08:36.273298 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/fvt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/scripts/fvt/.env"] [unique_id "aZlL5MM5vNyyeo5gKbcS9wAAAAc"] [Sat Feb 21 11:08:40.522995 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /secrets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/secrets/.env"] [unique_id "aZlL6EjxORN6mSk10kY_5gAAAAE"] [Sat Feb 21 11:08:41.704612 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /selfish-darling-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/selfish-darling-backend/.env"] [unique_id "aZlL6R_VxjWv7hcrM1_dIwAAAAk"] [Sat Feb 21 11:08:44.323713 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve-browserbench/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/serve-browserbench/.env"] [unique_id "aZlL7GM-kOlwXmZZvLvX_gAAAAo"] [Sat Feb 21 11:08:45.613186 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Serve_time_server/.env"] [unique_id "aZlL7WoVyMVcfJ9uH8ajlAAAAAg"] [Sat Feb 21 11:08:48.177853 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/server.log"] [unique_id "aZlL8GoVyMVcfJ9uH8ajlQAAAAg"] [Sat Feb 21 11:08:49.583273 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/server/config/.env"] [unique_id "aZlL8cM5vNyyeo5gKbcS_QAAAAc"] [Sat Feb 21 11:08:50.864664 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/server/laravel/.env"] [unique_id "aZlL8h_VxjWv7hcrM1_dKAAAAAk"] [Sat Feb 21 11:08:51.324457 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlL8xHl2U-jS0ZSEvYBigAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:08:51.324544 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlL8xHl2U-jS0ZSEvYBigAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:08:53.463546 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlL9RHl2U-jS0ZSEvYBiwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:08:53.463639 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlL9RHl2U-jS0ZSEvYBiwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:08:53.578742 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/src/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/server/src/persistence/.env"] [unique_id "aZlL9WM-kOlwXmZZvLvYAwAAAAo"] [Sat Feb 21 11:08:54.812203 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Server_with_db/.env"] [unique_id "aZlL9gBA6wjZoL6uVnyuOAAAAAI"] [Sat Feb 21 11:08:58.559204 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/service/.env"] [unique_id "aZlL-sM5vNyyeo5gKbcTAQAAAAc"] [Sat Feb 21 11:08:59.826754 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/.env"] [unique_id "aZlL-x_VxjWv7hcrM1_dLQAAAAk"] [Sat Feb 21 11:09:01.445205 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/adminer/.env"] [unique_id "aZlL_WM-kOlwXmZZvLvYCAAAAAo"] [Sat Feb 21 11:09:02.901461 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/deployment-agent/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/deployment-agent/.env"] [unique_id "aZlL_h_VxjWv7hcrM1_dLgAAAAk"] [Sat Feb 21 11:09:04.407710 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/documents/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/documents/.env"] [unique_id "aZlMAGM-kOlwXmZZvLvYCQAAAAo"] [Sat Feb 21 11:09:05.750565 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/graylog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/graylog/.env"] [unique_id "aZlMAR_VxjWv7hcrM1_dLwAAAAk"] [Sat Feb 21 11:09:07.158068 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/jaeger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/jaeger/.env"] [unique_id "aZlMAwBA6wjZoL6uVnyuPwAAAAI"] [Sat Feb 21 11:09:08.574538 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/minio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/minio/.env"] [unique_id "aZlMBGM-kOlwXmZZvLvYCwAAAAo"] [Sat Feb 21 11:09:09.874076 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/monitoring/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/monitoring/.env"] [unique_id "aZlMBcM5vNyyeo5gKbcTBwAAAAc"] [Sat Feb 21 11:09:10.158207 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMBgBA6wjZoL6uVnyuQAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop2%2Fmq [Sat Feb 21 11:09:10.158321 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMBgBA6wjZoL6uVnyuQAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop2%2Fmq [Sat Feb 21 11:09:11.581530 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/portainer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/portainer/.env"] [unique_id "aZlMBwBA6wjZoL6uVnyuQQAAAAI"] [Sat Feb 21 11:09:12.900237 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/redis-commander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/redis-commander/.env"] [unique_id "aZlMCMM5vNyyeo5gKbcTCAAAAAc"] [Sat Feb 21 11:09:14.398854 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/registry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/registry/.env"] [unique_id "aZlMCgBA6wjZoL6uVnyuQgAAAAI"] [Sat Feb 21 11:09:15.673643 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/simcore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/simcore/.env"] [unique_id "aZlMC8M5vNyyeo5gKbcTCQAAAAc"] [Sat Feb 21 11:09:16.977718 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/traefik/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/services/traefik/.env"] [unique_id "aZlMDEjxORN6mSk10kY_-QAAAAE"] [Sat Feb 21 11:09:18.292406 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sessions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sessions/.env"] [unique_id "aZlMDsM5vNyyeo5gKbcTCgAAAAc"] [Sat Feb 21 11:09:20.879682 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/shared/.env"] [unique_id "aZlMEGoVyMVcfJ9uH8ajqAAAAAg"] [Sat Feb 21 11:09:22.176958 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlMEGoVyMVcfJ9uH8ajqAAAAAg"] [Sat Feb 21 11:09:22.177072 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlMEGoVyMVcfJ9uH8ajqAAAAAg"] [Sat Feb 21 11:09:22.272447 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shibboleth/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/shibboleth/.env"] [unique_id "aZlMEkjxORN6mSk10kY_-wAAAAE"] [Sat Feb 21 11:09:23.529453 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/shop/.env"] [unique_id "aZlME17N2x2Af1vETfMkVgAAAAU"] [Sat Feb 21 11:09:24.908797 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopware/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/shopware/.env"] [unique_id "aZlMFABA6wjZoL6uVnyuSAAAAAI"] [Sat Feb 21 11:09:27.192231 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Simple_server/.env"] [unique_id "aZlMF4XWYBQ8sX5nXL9erQAAAAQ"] [Sat Feb 21 11:09:28.408630 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site-library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/site-library/.env"] [unique_id "aZlMGBHl2U-jS0ZSEvYBoAAAAAM"] [Sat Feb 21 11:09:29.853330 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sitemaps/.env"] [unique_id "aZlMGWoVyMVcfJ9uH8ajrQAAAAg"] [Sat Feb 21 11:09:31.213864 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sites/.env"] [unique_id "aZlMGx_VxjWv7hcrM1_dPAAAAAk"] [Sat Feb 21 11:09:32.411887 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitestatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sitestatic/.env"] [unique_id "aZlMHMM5vNyyeo5gKbcTEQAAAAc"] [Sat Feb 21 11:09:33.723717 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Socketio/.env"] [unique_id "aZlMHYXWYBQ8sX5nXL9esAAAAAQ"] [Sat Feb 21 11:09:35.171012 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /source/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/source/.env"] [unique_id "aZlMH0jxORN6mSk10kZAAgAAAAE"] [Sat Feb 21 11:09:36.608084 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sources/.env"] [unique_id "aZlMIBHl2U-jS0ZSEvYBpAAAAAM"] [Sat Feb 21 11:09:38.066576 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Sources/API/.env"] [unique_id "aZlMIsM5vNyyeo5gKbcTFAAAAAc"] [Sat Feb 21 11:09:39.440879 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spearmint/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/spearmint/.env"] [unique_id "aZlMIxHl2U-jS0ZSEvYBpQAAAAM"] [Sat Feb 21 11:09:40.912908 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spikes/config-material-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/spikes/config-material-app/.env"] [unique_id "aZlMJGoVyMVcfJ9uH8ajswAAAAg"] [Sat Feb 21 11:09:42.093328 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/SpotiApps/.env"] [unique_id "aZlMJsM5vNyyeo5gKbcTFgAAAAc"] [Sat Feb 21 11:09:43.383451 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/instancewithdependentsteps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "aZlMJx_VxjWv7hcrM1_dQwAAAAk"] [Sat Feb 21 11:09:44.569110 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptintegrationproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "aZlMKIXWYBQ8sX5nXL9etgAAAAQ"] [Sat Feb 21 11:09:45.908767 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "aZlMKWoVyMVcfJ9uH8ajtgAAAAg"] [Sat Feb 21 11:09:47.338596 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptvisualizeproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "aZlMK8M5vNyyeo5gKbcTGAAAAAc"] [Sat Feb 21 11:09:48.617401 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/add-auth/express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/add-auth/express/.env"] [unique_id "aZlMLIXWYBQ8sX5nXL9euAAAAAQ"] [Sat Feb 21 11:09:49.987747 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/assembly/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/assembly/.env"] [unique_id "aZlMLUjxORN6mSk10kZACAAAAAE"] [Sat Feb 21 11:09:51.305157 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/character-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/character-service/.env"] [unique_id "aZlML2oVyMVcfJ9uH8ajuQAAAAg"] [Sat Feb 21 11:09:52.608410 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/client/mobile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/client/mobile/.env"] [unique_id "aZlMMF7N2x2Af1vETfMkaAAAAAU"] [Sat Feb 21 11:09:53.810792 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/core/tests/dotenv-files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "aZlMMWoVyMVcfJ9uH8ajugAAAAg"] [Sat Feb 21 11:09:55.093008 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/gameprovider-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/gameprovider-service/.env"] [unique_id "aZlMM8HYh9vEh09pC4OJpAAAAAY"] [Sat Feb 21 11:09:56.397535 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/main/front-end/.env"] [unique_id "aZlMNIXWYBQ8sX5nXL9evQAAAAQ"] [Sat Feb 21 11:09:57.736207 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/resources/archetype-resources/__rootartifactid__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "aZlMNcM5vNyyeo5gKbcTHgAAAAc"] [Sat Feb 21 11:09:58.990983 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/renderer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/src/renderer/.env"] [unique_id "aZlMNmoVyMVcfJ9uH8ajvAAAAAg"] [Sat Feb 21 11:10:00.303715 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/controller/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/srv6_controller/controller/.env"] [unique_id "aZlMOMM5vNyyeo5gKbcTHwAAAAc"] [Sat Feb 21 11:10:01.484780 2026] [cgi:error] [pid 1926596:tid 1926596] [client 206.168.34.222:0] AH02812: stderr from /home/mastercommnet/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://mastercomm.net.pk:80/cgi-bin [Sat Feb 21 11:10:02.203380 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/srv6_controller/examples/.env"] [unique_id "aZlMOsHYh9vEh09pC4OJqAAAAAY"] [Sat Feb 21 11:10:03.982430 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/node-manager/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/srv6_controller/node-manager/.env"] [unique_id "aZlMOxHl2U-jS0ZSEvYBtgAAAAM"] [Sat Feb 21 11:10:05.845570 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /st-js-be-2020-movies-two/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/st-js-be-2020-movies-two/.env"] [unique_id "aZlMPcM5vNyyeo5gKbcTIgAAAAc"] [Sat Feb 21 11:10:08.928364 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stackato-pkg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/stackato-pkg/.env"] [unique_id "aZlMQB_VxjWv7hcrM1_dUwAAAAk"] [Sat Feb 21 11:10:10.295139 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/stag/.env"] [unique_id "aZlMQkjxORN6mSk10kZAFgAAAAE"] [Sat Feb 21 11:10:14.258861 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/staging/api/.env"] [unique_id "aZlMRgBA6wjZoL6uVnyuZQAAAAI"] [Sat Feb 21 11:10:15.507396 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/staging/backend/.env"] [unique_id "aZlMR0jxORN6mSk10kZAGAAAAAE"] [Sat Feb 21 11:10:17.099201 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/staging/frontend/.env"] [unique_id "aZlMSWoVyMVcfJ9uH8ajxwAAAAg"] [Sat Feb 21 11:10:18.423448 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-collected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static-collected/.env"] [unique_id "aZlMSsHYh9vEh09pC4OJsgAAAAY"] [Sat Feb 21 11:10:19.799691 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static-html/.env"] [unique_id "aZlMS2oVyMVcfJ9uH8ajyAAAAAg"] [Sat Feb 21 11:10:21.269653 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static-root/.env"] [unique_id "aZlMTcHYh9vEh09pC4OJswAAAAY"] [Sat Feb 21 11:10:22.653364 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static/.env"] [unique_id "aZlMTmM-kOlwXmZZvLvYNwAAAAo"] [Sat Feb 21 11:10:33.230810 2026] [access_compat:error] [pid 1926599:tid 1926599] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:10:37.300500 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMXRHl2U-jS0ZSEvYByQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:10:37.300582 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMXRHl2U-jS0ZSEvYByQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:10:42.259117 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static_prod/.env"] [unique_id "aZlMYmoVyMVcfJ9uH8aj0wAAAAg"] [Sat Feb 21 11:10:43.825129 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static_root/.env"] [unique_id "aZlMY8HYh9vEh09pC4OJvgAAAAY"] [Sat Feb 21 11:10:44.091332 2026] [security2:error] [pid 1928316:tid 1928316] [client 114.119.136.203:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-global": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlMYGM-kOlwXmZZvLvYQAAAAAo"], referer: https://spotliteworld.com/product/martix/ [Sat Feb 21 11:10:44.091410 2026] [security2:error] [pid 1928316:tid 1928316] [client 114.119.136.203:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-ip": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlMYGM-kOlwXmZZvLvYQAAAAAo"], referer: https://spotliteworld.com/product/martix/ [Sat Feb 21 11:10:45.162154 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/static_user/.env"] [unique_id "aZlMZWoVyMVcfJ9uH8aj1AAAAAg"] [Sat Feb 21 11:10:46.447884 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staticfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/staticfiles/.env"] [unique_id "aZlMZkjxORN6mSk10kZAKAAAAAE"] [Sat Feb 21 11:10:47.681353 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/stats/.env"] [unique_id "aZlMZ2M-kOlwXmZZvLvYQgAAAAo"] [Sat Feb 21 11:10:49.076431 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/.env"] [unique_id "aZlMaUjxORN6mSk10kZAKQAAAAE"] [Sat Feb 21 11:10:50.455129 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/.env.local"] [unique_id "aZlMamM-kOlwXmZZvLvYQwAAAAo"] [Sat Feb 21 11:10:53.408627 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /strapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/strapi/.env"] [unique_id "aZlMbWoVyMVcfJ9uH8aj2AAAAAg"] [Sat Feb 21 11:10:54.739750 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /style/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/style/.env"] [unique_id "aZlMbmM-kOlwXmZZvLvYRQAAAAo"] [Sat Feb 21 11:10:56.079457 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /styles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/styles/.env"] [unique_id "aZlMcGoVyMVcfJ9uH8aj2QAAAAg"] [Sat Feb 21 11:10:57.380648 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stylesheets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/stylesheets/.env"] [unique_id "aZlMcV7N2x2Af1vETfMkjAAAAAU"] [Sat Feb 21 11:10:59.882904 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/symfony/.env"] [unique_id "aZlMcwBA6wjZoL6uVnyufgAAAAI"] [Sat Feb 21 11:11:01.412922 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system-config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/system-config/.env"] [unique_id "aZlMdR_VxjWv7hcrM1_ddAAAAAk"] [Sat Feb 21 11:11:02.914861 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/system/.env"] [unique_id "aZlMdsHYh9vEh09pC4OJygAAAAY"] [Sat Feb 21 11:11:04.301526 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlMdsHYh9vEh09pC4OJygAAAAY"] [Sat Feb 21 11:11:04.301611 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlMdsHYh9vEh09pC4OJygAAAAY"] [Sat Feb 21 11:11:07.109115 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /target/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/target/.env"] [unique_id "aZlMe8HYh9vEh09pC4OJzAAAAAY"] [Sat Feb 21 11:11:08.455838 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr10/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/temanr10/.env"] [unique_id "aZlMfGoVyMVcfJ9uH8aj4QAAAAg"] [Sat Feb 21 11:11:09.879511 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr9/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/temanr9/.env"] [unique_id "aZlMfcHYh9vEh09pC4OJzQAAAAY"] [Sat Feb 21 11:11:10.923195 2026] [security2:error] [pid 1936648:tid 1936648] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMfh_VxjWv7hcrM1_degAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsda3 [Sat Feb 21 11:11:10.923247 2026] [security2:error] [pid 1936648:tid 1936648] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMfh_VxjWv7hcrM1_degAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsda3 [Sat Feb 21 11:11:12.333454 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/temp/.env"] [unique_id "aZlMgF7N2x2Af1vETfMklQAAAAU"] [Sat Feb 21 11:11:13.561570 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/template/.env"] [unique_id "aZlMgQBA6wjZoL6uVnyuhgAAAAI"] [Sat Feb 21 11:11:14.925021 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /templates/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/templates/.env"] [unique_id "aZlMgkjxORN6mSk10kZAOQAAAAE"] [Sat Feb 21 11:11:19.195109 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test-network/.env"] [unique_id "aZlMh8HYh9vEh09pC4OJ0wAAAAY"] [Sat Feb 21 11:11:20.583444 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/addorg3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test-network/addOrg3/.env"] [unique_id "aZlMiBHl2U-jS0ZSEvYB4gAAAAM"] [Sat Feb 21 11:11:23.369553 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/aries-js-worker/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "aZlMi8HYh9vEh09pC4OJ1QAAAAY"] [Sat Feb 21 11:11:23.674738 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMiwBA6wjZoL6uVnyujAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:11:23.674796 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMiwBA6wjZoL6uVnyujAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:11:24.737373 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/adapter-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/adapter-rest/.env"] [unique_id "aZlMjGM-kOlwXmZZvLvYVwAAAAo"] [Sat Feb 21 11:11:27.007431 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/agent-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "aZlMjxHl2U-jS0ZSEvYB5gAAAAM"] [Sat Feb 21 11:11:28.306693 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/couchdb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/couchdb/.env"] [unique_id "aZlMkN2_qyx-0h__vX2fmAAAAAA"] [Sat Feb 21 11:11:29.712763 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/demo/.env"] [unique_id "aZlMkWoVyMVcfJ9uH8aj7AAAAAg"] [Sat Feb 21 11:11:30.981261 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/openapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "aZlMkl7N2x2Af1vETfMknwAAAAU"] [Sat Feb 21 11:11:32.267066 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-method-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/did-method-rest/.env"] [unique_id "aZlMlGM-kOlwXmZZvLvYWgAAAAo"] [Sat Feb 21 11:11:32.680960 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMlMM5vNyyeo5gKbcTVAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:11:32.681061 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMlMM5vNyyeo5gKbcTVAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:11:33.470854 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "aZlMld2_qyx-0h__vX2fmgAAAAA"] [Sat Feb 21 11:11:34.830298 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/edv-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/edv-rest/.env"] [unique_id "aZlMlsHYh9vEh09pC4OJ2gAAAAY"] [Sat Feb 21 11:11:35.431254 2026] [access_compat:error] [pid 1933844:tid 1933844] [client 72.205.0.67:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:11:36.177401 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/openapi-demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/openapi-demo/.env"] [unique_id "aZlMmMM5vNyyeo5gKbcTVgAAAAc"] [Sat Feb 21 11:11:36.718136 2026] [access_compat:error] [pid 1926596:tid 1926596] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:11:37.651129 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/sidetree-mock/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "aZlMmV7N2x2Af1vETfMkogAAAAU"] [Sat Feb 21 11:11:38.973345 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/universalresolver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/universalresolver/.env"] [unique_id "aZlMmmM-kOlwXmZZvLvYXAAAAAo"] [Sat Feb 21 11:11:40.276730 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/vc-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/bdd/fixtures/vc-rest/.env"] [unique_id "aZlMnMHYh9vEh09pC4OJ3gAAAAY"] [Sat Feb 21 11:11:41.560919 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/fixtures/.env"] [unique_id "aZlMnYXWYBQ8sX5nXL9e-AAAAAQ"] [Sat Feb 21 11:11:42.870572 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/fixtures/app_types/node/.env"] [unique_id "aZlMnkjxORN6mSk10kZASAAAAAE"] [Sat Feb 21 11:11:44.131739 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZlMoIXWYBQ8sX5nXL9e-QAAAAQ"] [Sat Feb 21 11:11:45.453910 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/node_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/fixtures/node_path/.env"] [unique_id "aZlMoR_VxjWv7hcrM1_dkAAAAAk"] [Sat Feb 21 11:11:46.698963 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/integration/env-config/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/test/integration/env-config/app/.env"] [unique_id "aZlMooXWYBQ8sX5nXL9e-gAAAAQ"] [Sat Feb 21 11:11:48.465381 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMpGoVyMVcfJ9uH8aj9AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:11:48.465453 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMpGoVyMVcfJ9uH8aj9AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:11:58.355491 2026] [security2:error] [pid 1936648:tid 1936648] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMrh_VxjWv7hcrM1_dlwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:11:58.355584 2026] [security2:error] [pid 1936648:tid 1936648] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlMrh_VxjWv7hcrM1_dlwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:12:13.158928 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 98.175.31.195:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:12:16.944475 2026] [access_compat:error] [pid 1926599:tid 1926599] [client 72.56.59.56:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:12:21.724837 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/testfiles/.env"] [unique_id "aZlMxRHl2U-jS0ZSEvYCBgAAAAM"] [Sat Feb 21 11:12:26.541938 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/testing/.env"] [unique_id "aZlMykjxORN6mSk10kZAYAAAAAE"] [Sat Feb 21 11:12:27.798991 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/testing/docker/.env"] [unique_id "aZlMy8M5vNyyeo5gKbcTbwAAAAc"] [Sat Feb 21 11:12:27.847053 2026] [access_compat:error] [pid 1940612:tid 1940612] [client 223.97.170.80:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:12:29.175465 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/.env"] [unique_id "aZlMzV7N2x2Af1vETfMkuwAAAAU"] [Sat Feb 21 11:12:30.458617 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Tests/Application/.env"] [unique_id "aZlMzoXWYBQ8sX5nXL9fEQAAAAQ"] [Sat Feb 21 11:12:31.716879 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v10.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aZlMz2oVyMVcfJ9uH8akCgAAAAg"] [Sat Feb 21 11:12:32.995319 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v11.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v11.0/.env"] [unique_id "aZlM0EjxORN6mSk10kZAYwAAAAE"] [Sat Feb 21 11:12:34.339207 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v12.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v12.0/.env"] [unique_id "aZlM0h_VxjWv7hcrM1_dpQAAAAk"] [Sat Feb 21 11:12:35.880299 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v13.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v13.0/.env"] [unique_id "aZlM02M-kOlwXmZZvLvYeAAAAAo"] [Sat Feb 21 11:12:37.169904 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v7.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v7.0/.env"] [unique_id "aZlM1V7N2x2Af1vETfMkvwAAAAU"] [Sat Feb 21 11:12:38.478378 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v8.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v8.0/.env"] [unique_id "aZlM1mM-kOlwXmZZvLvYeQAAAAo"] [Sat Feb 21 11:12:39.715772 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v9.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "aZlM18M5vNyyeo5gKbcTdQAAAAc"] [Sat Feb 21 11:12:41.120212 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/drupal-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/drupal-test/.env"] [unique_id "aZlM2QBA6wjZoL6uVnyutgAAAAI"] [Sat Feb 21 11:12:42.337685 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/integration/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZlM2sHYh9vEh09pC4OJ_gAAAAY"] [Sat Feb 21 11:12:43.592967 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/todo-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tests/todo-react/.env"] [unique_id "aZlM24XWYBQ8sX5nXL9fGAAAAAQ"] [Sat Feb 21 11:12:44.861207 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testwork_json/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/testwork_json/.env"] [unique_id "aZlM3MM5vNyyeo5gKbcTdwAAAAc"] [Sat Feb 21 11:12:46.074066 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/theme/.env"] [unique_id "aZlM3t2_qyx-0h__vX2fwQAAAAA"] [Sat Feb 21 11:12:47.386113 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/theme_static/.env"] [unique_id "aZlM32oVyMVcfJ9uH8akEgAAAAg"] [Sat Feb 21 11:12:47.645498 2026] [access_compat:error] [pid 1926599:tid 1926599] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:12:48.200430 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:12:48.669402 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/thumb/.env"] [unique_id "aZlM4MM5vNyyeo5gKbcTeQAAAAc"] [Sat Feb 21 11:12:50.036491 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumbs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/thumbs/.env"] [unique_id "aZlM4moVyMVcfJ9uH8akEwAAAAg"] [Sat Feb 21 11:12:51.497004 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tiedostot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tiedostot/.env"] [unique_id "aZlM4xHl2U-jS0ZSEvYCFgAAAAM"] [Sat Feb 21 11:12:54.199686 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tmp/.env"] [unique_id "aZlM5h_VxjWv7hcrM1_dsAAAAAk"] [Sat Feb 21 11:12:55.408290 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tmp/config/.env"] [unique_id "aZlM517N2x2Af1vETfMkxgAAAAU"] [Sat Feb 21 11:13:00.673001 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/tools/.env"] [unique_id "aZlM7GoVyMVcfJ9uH8akGAAAAAg"] [Sat Feb 21 11:13:02.051917 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Travel_form/.env"] [unique_id "aZlM7h_VxjWv7hcrM1_dtAAAAAk"] [Sat Feb 21 11:13:03.365544 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ts/prime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ts/prime/.env"] [unique_id "aZlM72M-kOlwXmZZvLvYhQAAAAo"] [Sat Feb 21 11:13:05.864152 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 98.188.47.132:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:13:07.600599 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ubuntu/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ubuntu/.env"] [unique_id "aZlM88M5vNyyeo5gKbcThAAAAAc"] [Sat Feb 21 11:13:08.890607 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/ui/.env"] [unique_id "aZlM9EjxORN6mSk10kZAegAAAAE"] [Sat Feb 21 11:13:09.162394 2026] [security2:error] [pid 1931467:tid 1931467] [client 139.135.38.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/wp-content/themes/WebsiteFlooring/lib/admin/assets/lib/webfont/webfont.min.js"] [unique_id "aZlM9YXWYBQ8sX5nXL9fKQAAAAQ"], referer: https://medimen.ca/ [Sat Feb 21 11:13:09.162466 2026] [security2:error] [pid 1931467:tid 1931467] [client 139.135.38.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/wp-content/themes/WebsiteFlooring/lib/admin/assets/lib/webfont/webfont.min.js"] [unique_id "aZlM9YXWYBQ8sX5nXL9fKQAAAAQ"], referer: https://medimen.ca/ [Sat Feb 21 11:13:10.723722 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unixtime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/unixtime/.env"] [unique_id "aZlM9gBA6wjZoL6uVnyuygAAAAI"] [Sat Feb 21 11:13:11.725966 2026] [security2:error] [pid 1940612:tid 1940612] [client 139.135.38.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/wp-content/uploads/2020/03/WhatsApp-Image-2024-01-22-at-4.20.17-PM.jpeg"] [unique_id "aZlM992_qyx-0h__vX2f1gAAAAA"], referer: https://medimen.ca/wp-content/uploads/elementor/css/post-134.css?ver=1732300505 [Sat Feb 21 11:13:11.726007 2026] [security2:error] [pid 1940612:tid 1940612] [client 139.135.38.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/wp-content/uploads/2020/03/WhatsApp-Image-2024-01-22-at-4.20.17-PM.jpeg"] [unique_id "aZlM992_qyx-0h__vX2f1gAAAAA"], referer: https://medimen.ca/wp-content/uploads/elementor/css/post-134.css?ver=1732300505 [Sat Feb 21 11:13:11.976954 2026] [security2:error] [pid 1936648:tid 1936648] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unsplash-downloader/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/unsplash-downloader/.env"] [unique_id "aZlM9x_VxjWv7hcrM1_dwQAAAAk"] [Sat Feb 21 11:13:13.163846 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlM-YXWYBQ8sX5nXL9fLwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 11:13:13.163946 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlM-YXWYBQ8sX5nXL9fLwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 11:13:14.594965 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:13:14.640539 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/upfiles/.env"] [unique_id "aZlM-oXWYBQ8sX5nXL9fMAAAAAQ"] [Sat Feb 21 11:13:15.907380 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upload/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/upload/.env"] [unique_id "aZlM-8M5vNyyeo5gKbcTigAAAAc"] [Sat Feb 21 11:13:17.248562 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/uploads/.env"] [unique_id "aZlM_QBA6wjZoL6uVnyuzgAAAAI"] [Sat Feb 21 11:13:18.696195 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /urlmem-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/urlmem-app/.env"] [unique_id "aZlM_hHl2U-jS0ZSEvYCLQAAAAM"] [Sat Feb 21 11:13:20.107213 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/user/.env.staging"] [unique_id "aZlNAABA6wjZoL6uVnyuzwAAAAI"] [Sat Feb 21 11:13:20.185077 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNAN2_qyx-0h__vX2f2wAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fmq [Sat Feb 21 11:13:20.185155 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNAN2_qyx-0h__vX2f2wAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fmq [Sat Feb 21 11:13:22.791022 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/User_info/.env"] [unique_id "aZlNAmM-kOlwXmZZvLvYlwAAAAo"] [Sat Feb 21 11:13:24.010640 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/v1/.env"] [unique_id "aZlNBF7N2x2Af1vETfMk2AAAAAU"] [Sat Feb 21 11:13:30.344843 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/v2/.env"] [unique_id "aZlNCt2_qyx-0h__vX2f3wAAAAA"] [Sat Feb 21 11:13:31.684613 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/var/backup/.env"] [unique_id "aZlNC17N2x2Af1vETfMk2wAAAAU"] [Sat Feb 21 11:13:32.958524 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/.env"] [unique_id "aZlNDBHl2U-jS0ZSEvYCNQAAAAM"] [Sat Feb 21 11:13:34.078927 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:13:34.251125 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/gobuffalo/envy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/github.com/gobuffalo/envy/.env"] [unique_id "aZlNDsM5vNyyeo5gKbcTlQAAAAc"] [Sat Feb 21 11:13:35.673612 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/subosito/gotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/github.com/subosito/gotenv/.env"] [unique_id "aZlND17N2x2Af1vETfMk3QAAAAU"] [Sat Feb 21 11:13:39.412068 2026] [access_compat:error] [pid 1926596:tid 1926596] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:13:39.585887 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /videos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/videos/.env"] [unique_id "aZlNEwBA6wjZoL6uVnyu2QAAAAI"] [Sat Feb 21 11:13:42.220571 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vm-docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vm-docker-compose/.env"] [unique_id "aZlNFt2_qyx-0h__vX2f5gAAAAA"] [Sat Feb 21 11:13:42.921983 2026] [access_compat:error] [pid 1933844:tid 1933844] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:13:43.509682 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vod_installer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vod_installer/.env"] [unique_id "aZlNF17N2x2Af1vETfMk4AAAAAU"] [Sat Feb 21 11:13:44.810175 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue-end/vue-til/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vue-end/vue-til/.env"] [unique_id "aZlNGN2_qyx-0h__vX2f5wAAAAA"] [Sat Feb 21 11:13:46.067874 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vue/.env"] [unique_id "aZlNGsHYh9vEh09pC4OKLAAAAAY"] [Sat Feb 21 11:13:46.770894 2026] [access_compat:error] [pid 1931467:tid 1931467] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:13:47.333952 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/vuecli/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vue/vuecli/.env"] [unique_id "aZlNG92_qyx-0h__vX2f6AAAAAA"] [Sat Feb 21 11:13:48.465830 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNHBHl2U-jS0ZSEvYCPQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:13:48.465907 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNHBHl2U-jS0ZSEvYCPQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:13:48.677969 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue_crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vue_CRM/.env"] [unique_id "aZlNHABA6wjZoL6uVnyu3gAAAAI"] [Sat Feb 21 11:13:51.272233 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlNHV7N2x2Af1vETfMk5AAAAAU"] [Sat Feb 21 11:13:51.272301 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlNHV7N2x2Af1vETfMk5AAAAAU"] [Sat Feb 21 11:13:51.360215 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web-dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/web-dist/.env"] [unique_id "aZlNHxHl2U-jS0ZSEvYCPwAAAAM"] [Sat Feb 21 11:13:52.753067 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNIN2_qyx-0h__vX2f6wAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:13:52.753139 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNIN2_qyx-0h__vX2f6wAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:13:52.816114 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/web.config"] [unique_id "aZlNIGoVyMVcfJ9uH8akQAAAAAg"] [Sat Feb 21 11:13:52.816465 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/web.config"] [unique_id "aZlNIGoVyMVcfJ9uH8akQAAAAAg"] [Sat Feb 21 11:13:56.334140 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/Web/siteMariage/.env"] [unique_id "aZlNJMHYh9vEh09pC4OKMgAAAAY"] [Sat Feb 21 11:13:57.365690 2026] [access_compat:error] [pid 1940612:tid 1940612] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:13:58.647891 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:14:00.179888 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webroot_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/webroot_path/.env"] [unique_id "aZlNKMHYh9vEh09pC4OKNAAAAAY"] [Sat Feb 21 11:14:01.638823 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/website/.env"] [unique_id "aZlNKRHl2U-jS0ZSEvYCRQAAAAM"] [Sat Feb 21 11:14:02.924761 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /websocket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/websocket/.env"] [unique_id "aZlNKmM-kOlwXmZZvLvYqwAAAAo"] [Sat Feb 21 11:14:03.279076 2026] [access_compat:error] [pid 1926599:tid 1926599] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:14:04.240233 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webstatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/webstatic/.env"] [unique_id "aZlNLIXWYBQ8sX5nXL9fTAAAAAQ"] [Sat Feb 21 11:14:05.701605 2026] [security2:error] [pid 1926664:tid 1926664] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/webui/.env"] [unique_id "aZlNLcHYh9vEh09pC4OKNwAAAAY"] [Sat Feb 21 11:14:07.223682 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/well-known/.env"] [unique_id "aZlNL0jxORN6mSk10kZAngAAAAE"] [Sat Feb 21 11:14:08.523956 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /whturk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/whturk/.env"] [unique_id "aZlNMIXWYBQ8sX5nXL9fTgAAAAQ"] [Sat Feb 21 11:14:08.848411 2026] [access_compat:error] [pid 1933844:tid 1933844] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:14:09.771056 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.2.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/windows/tests/9.2.x/.env"] [unique_id "aZlNMcM5vNyyeo5gKbcTqwAAAAc"] [Sat Feb 21 11:14:11.116681 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.3.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/windows/tests/9.3.x/.env"] [unique_id "aZlNM92_qyx-0h__vX2f9QAAAAA"] [Sat Feb 21 11:14:12.394052 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wordpress/.env"] [unique_id "aZlNNGoVyMVcfJ9uH8akTAAAAAg"] [Sat Feb 21 11:14:13.727288 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /workspace/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/workspace/.env"] [unique_id "aZlNNRHl2U-jS0ZSEvYCTQAAAAM"] [Sat Feb 21 11:14:15.084051 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-config.old"] [unique_id "aZlNN92_qyx-0h__vX2f9wAAAAA"] [Sat Feb 21 11:14:15.084870 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-config.old"] [unique_id "aZlNN92_qyx-0h__vX2f9wAAAAA"] [Sat Feb 21 11:14:16.021511 2026] [access_compat:error] [pid 1926664:tid 1926664] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:14:16.391863 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/.env"] [unique_id "aZlNOABA6wjZoL6uVnyu7wAAAAI"] [Sat Feb 21 11:14:17.700401 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/debug.log"] [unique_id "aZlNOd2_qyx-0h__vX2f-AAAAAA"] [Sat Feb 21 11:14:20.227850 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-login.php/.env"] [unique_id "aZlNPEyv4hZiX9Y80XW_ywAAAAk"] [Sat Feb 21 11:14:22.469693 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:14:22.788287 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp/.env"] [unique_id "aZlNPgBA6wjZoL6uVnyu8gAAAAI"] [Sat Feb 21 11:14:24.016320 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www-data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/www-data/.env"] [unique_id "aZlNQN2_qyx-0h__vX2f-wAAAAA"] [Sat Feb 21 11:14:24.133525 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNQMM5vNyyeo5gKbcTsgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 11:14:24.133625 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNQMM5vNyyeo5gKbcTsgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 11:14:27.871217 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xx-final/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/xx-final/vue-heroes/.env"] [unique_id "aZlNQ92_qyx-0h__vX2f_AAAAAA"] [Sat Feb 21 11:14:30.479171 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /zmusic-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/zmusic-frontend/.env"] [unique_id "aZlNRkyv4hZiX9Y80XW_0AAAAAk"] [Sat Feb 21 11:14:31.522464 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 72.211.46.124:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:14:31.910695 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/:443/.env"] [unique_id "aZlNRxHl2U-jS0ZSEvYCVwAAAAM"] [Sat Feb 21 11:14:33.213847 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:80/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/:80/.env"] [unique_id "aZlNSUyv4hZiX9Y80XW_0QAAAAk"] [Sat Feb 21 11:14:34.578187 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8080/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/:8080/.env"] [unique_id "aZlNSoXWYBQ8sX5nXL9fXwAAAAQ"] [Sat Feb 21 11:14:35.940323 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8081/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/:8081/.env"] [unique_id "aZlNSxHl2U-jS0ZSEvYCWQAAAAM"] [Sat Feb 21 11:14:37.300271 2026] [security2:error] [pid 1926596:tid 1926596] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/:8443/.env"] [unique_id "aZlNTUjxORN6mSk10kZArgAAAAE"] [Sat Feb 21 11:14:38.519189 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sendgrid_email/.env"] [unique_id "aZlNTmoVyMVcfJ9uH8akWwAAAAg"] [Sat Feb 21 11:14:39.772370 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.sendgrid"] [unique_id "aZlNT8M5vNyyeo5gKbcTvAAAAAc"] [Sat Feb 21 11:14:51.698877 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:15:04.714848 2026] [security2:error] [pid 1935147:tid 1935147] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-global": Permission denied [hostname "hawk-zhaotong.info"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZlNaF7N2x2Af1vETfMlEgAAAAU"] [Sat Feb 21 11:15:04.714926 2026] [security2:error] [pid 1935147:tid 1935147] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-ip": Permission denied [hostname "hawk-zhaotong.info"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZlNaF7N2x2Af1vETfMlEgAAAAU"] [Sat Feb 21 11:15:09.712971 2026] [security2:error] [pid 1942097:tid 1942097] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-global": Permission denied [hostname "hawk-zhaotong.info"] [uri "/cgi-bin/index.php"] [unique_id "aZlNbYZy3zgfuTKkxEXiLgAAAAs"] [Sat Feb 21 11:15:09.713046 2026] [security2:error] [pid 1942097:tid 1942097] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-ip": Permission denied [hostname "hawk-zhaotong.info"] [uri "/cgi-bin/index.php"] [unique_id "aZlNbYZy3zgfuTKkxEXiLgAAAAs"] [Sat Feb 21 11:15:10.458133 2026] [proxy_fcgi:error] [pid 1926783:tid 1926783] [client 49.43.155.175:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 11:15:10.717675 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:15:16.452973 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNdIZy3zgfuTKkxEXiMgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:15:16.453120 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNdIZy3zgfuTKkxEXiMgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:15:20.642939 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNeEyv4hZiX9Y80XW_8wAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:15:20.643013 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNeEyv4hZiX9Y80XW_8wAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:15:26.915608 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNfmoVyMVcfJ9uH8akfwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:15:26.915707 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNfmoVyMVcfJ9uH8akfwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:15:48.151068 2026] [security2:error] [pid 1941889:tid 1941889] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-global": Permission denied [hostname "hawk-zhaotong.info"] [uri "/123.php"] [unique_id "aZlNlEyv4hZiX9Y80XXACAAAAAk"] [Sat Feb 21 11:15:48.151168 2026] [security2:error] [pid 1941889:tid 1941889] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-ip": Permission denied [hostname "hawk-zhaotong.info"] [uri "/123.php"] [unique_id "aZlNlEyv4hZiX9Y80XXACAAAAAk"] [Sat Feb 21 11:15:52.929515 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/configs/application.ini"] [unique_id "aZlNmABA6wjZoL6uVnyvNAAAAAI"] [Sat Feb 21 11:16:11.210344 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNq4XWYBQ8sX5nXL9fpgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 11:16:11.210420 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlNq4XWYBQ8sX5nXL9fpgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 11:16:30.131561 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/sources/api/.env"] [unique_id "aZlNvmoVyMVcfJ9uH8akrwAAAAg"] [Sat Feb 21 11:16:30.576139 2026] [security2:error] [pid 1928316:tid 1928316] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-global": Permission denied [hostname "hawk-zhaotong.info"] [uri "/wp.php"] [unique_id "aZlNvmM-kOlwXmZZvLvZEAAAAAo"] [Sat Feb 21 11:16:30.576190 2026] [security2:error] [pid 1928316:tid 1928316] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/hawkzhao-ip": Permission denied [hostname "hawk-zhaotong.info"] [uri "/wp.php"] [unique_id "aZlNvmM-kOlwXmZZvLvZEAAAAAo"] [Sat Feb 21 11:16:36.086797 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/api/.git/config"] [unique_id "aZlNxGoVyMVcfJ9uH8aksgAAAAg"] [Sat Feb 21 11:16:50.592533 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/drupal/coder/.git/info/refs"] [unique_id "aZlN0gBA6wjZoL6uVnyvWgAAAAI"] [Sat Feb 21 11:16:51.867218 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/drupal/coder/.git/info/exclude"] [unique_id "aZlN02M-kOlwXmZZvLvZHQAAAAo"] [Sat Feb 21 11:16:53.172000 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/drupal/coder/.git/objects/info"] [unique_id "aZlN1YZy3zgfuTKkxEXidgAAAAs"] [Sat Feb 21 11:16:54.471934 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info/packs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/drupal/coder/.git/objects/info/packs"] [unique_id "aZlN1oXWYBQ8sX5nXL9fwAAAAAQ"] [Sat Feb 21 11:16:54.728281 2026] [security2:error] [pid 1926602:tid 1926602] [client 98.84.107.99:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within REQUEST_COOKIES:rfqtk_wp_session_a26785922b3516fe627bab9726c66e43: d50fceb67037cfcc7a931b5047079fea||1774246612||1774354612"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "spotliteworld.com"] [uri "/"] [unique_id "aZlN1hHl2U-jS0ZSEvYCuQAAAAM"] [Sat Feb 21 11:16:55.669581 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/info.log"] [unique_id "aZlN10yv4hZiX9Y80XXANgAAAAk"] [Sat Feb 21 11:16:59.865829 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlN2xHl2U-jS0ZSEvYCuwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi [Sat Feb 21 11:16:59.865937 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlN2xHl2U-jS0ZSEvYCuwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi [Sat Feb 21 11:17:02.576003 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZlN3sM5vNyyeo5gKbcUHAAAAAc"] [Sat Feb 21 11:17:05.142930 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/phpinfo.bak"] [unique_id "aZlN4RHl2U-jS0ZSEvYCvgAAAAM"] [Sat Feb 21 11:17:13.020173 2026] [cgi:error] [pid 1928316:tid 1928316] [client 66.132.153.126:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden [Sat Feb 21 11:17:13.020392 2026] [cgi:error] [pid 1928316:tid 1928316] [client 66.132.153.126:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157. [Sat Feb 21 11:17:15.518066 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlN6wBA6wjZoL6uVnyvZwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:17:15.518138 2026] [security2:error] [pid 1926599:tid 1926599] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlN6wBA6wjZoL6uVnyvZwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:17:16.270532 2026] [security2:error] [pid 1941889:tid 1941889] [client 51.75.151.149:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-content/plugins/cidaas-pro-master/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.redpenguinit.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZlN7Eyv4hZiX9Y80XXAQQAAAAk"] [Sat Feb 21 11:17:25.102433 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlN9WoVyMVcfJ9uH8akzwAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:17:25.102530 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlN9WoVyMVcfJ9uH8akzwAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:17:33.892714 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/.git/config"] [unique_id "aZlN_WoVyMVcfJ9uH8ak1gAAAAg"] [Sat Feb 21 11:17:35.153676 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "aZlN_0yv4hZiX9Y80XXATQAAAAk"] [Sat Feb 21 11:17:35.885299 2026] [security2:error] [pid 1933844:tid 1933844] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/.env"] [unique_id "aZlN_2oVyMVcfJ9uH8ak1wAAAAg"] [Sat Feb 21 11:17:35.986107 2026] [security2:error] [pid 1926599:tid 1926599] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/.env.live"] [unique_id "aZlN_wBA6wjZoL6uVnyvcwAAAAI"] [Sat Feb 21 11:17:36.556372 2026] [security2:error] [pid 1933844:tid 1933844] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlN_2oVyMVcfJ9uH8ak1wAAAAg"] [Sat Feb 21 11:17:36.562213 2026] [security2:error] [pid 1926599:tid 1926599] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlN_wBA6wjZoL6uVnyvcwAAAAI"] [Sat Feb 21 11:17:36.609351 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/themes/.git/config"] [unique_id "aZlOAF7N2x2Af1vETfMldgAAAAU"] [Sat Feb 21 11:17:37.663787 2026] [security2:error] [pid 1931467:tid 1931467] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/.env.production"] [unique_id "aZlOAYXWYBQ8sX5nXL9f3AAAAAQ"] [Sat Feb 21 11:17:37.683775 2026] [security2:error] [pid 1941889:tid 1941889] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/crm/.env"] [unique_id "aZlOAUyv4hZiX9Y80XXATwAAAAk"] [Sat Feb 21 11:17:37.698932 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/.env.prod"] [unique_id "aZlOAcM5vNyyeo5gKbcUMAAAAAc"] [Sat Feb 21 11:17:37.854697 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "aZlOAd2_qyx-0h__vX2gggAAAAA"] [Sat Feb 21 11:17:37.859687 2026] [security2:error] [pid 1933844:tid 1933844] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/.env.bak"] [unique_id "aZlOAWoVyMVcfJ9uH8ak2gAAAAg"] [Sat Feb 21 11:17:38.095509 2026] [security2:error] [pid 1931467:tid 1931467] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlOAYXWYBQ8sX5nXL9f3AAAAAQ"] [Sat Feb 21 11:17:38.124303 2026] [security2:error] [pid 1941889:tid 1941889] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlOAUyv4hZiX9Y80XXATwAAAAk"] [Sat Feb 21 11:17:38.260566 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlOAcM5vNyyeo5gKbcUMAAAAAc"] [Sat Feb 21 11:17:38.392825 2026] [security2:error] [pid 1933844:tid 1933844] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlOAWoVyMVcfJ9uH8ak2gAAAAg"] [Sat Feb 21 11:17:39.193421 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/db.sql"] [unique_id "aZlOA2M-kOlwXmZZvLvZPwAAAAo"] [Sat Feb 21 11:17:39.722288 2026] [authz_core:error] [pid 1926599:tid 1926599] [client 45.148.10.238:0] AH01630: client denied by server configuration: /home/mrxdt/public_html/wp-config.php [Sat Feb 21 11:17:39.722378 2026] [negotiation:error] [pid 1926599:tid 1926599] [client 45.148.10.238:0] AH00687: Negotiation: discovered file(s) matching request: /home/mrxdt/public_html/wp-config (None could be negotiated). [Sat Feb 21 11:17:40.393638 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/mysql.sql"] [unique_id "aZlOBF7N2x2Af1vETfMleQAAAAU"] [Sat Feb 21 11:17:41.669700 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/dump.sql"] [unique_id "aZlOBYZy3zgfuTKkxEXilQAAAAs"] [Sat Feb 21 11:17:42.232842 2026] [access_compat:error] [pid 1941889:tid 1941889] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:17:42.359953 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOBt2_qyx-0h__vX2ghAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 11:17:42.360060 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOBt2_qyx-0h__vX2ghAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 11:17:43.083265 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/db.sql"] [unique_id "aZlOB17N2x2Af1vETfMlegAAAAU"] [Sat Feb 21 11:17:44.231156 2026] [security2:error] [pid 1943958:tid 1943958] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxdt.com"] [uri "/awstats/.env"] [unique_id "aZlOCJv-4ricdaBAuZkNtQAAAAE"] [Sat Feb 21 11:17:44.387039 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/mysql.sql"] [unique_id "aZlOCIXWYBQ8sX5nXL9f4QAAAAQ"] [Sat Feb 21 11:17:44.661818 2026] [security2:error] [pid 1943958:tid 1943958] [client 45.148.10.238:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1117 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZlOCJv-4ricdaBAuZkNtQAAAAE"] [Sat Feb 21 11:17:45.706387 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backup/db.sql"] [unique_id "aZlOCWoVyMVcfJ9uH8ak3gAAAAg"] [Sat Feb 21 11:17:46.992128 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backups/db.sql"] [unique_id "aZlOCl7N2x2Af1vETfMlfAAAAAU"] [Sat Feb 21 11:17:48.403204 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/db_backup.sql"] [unique_id "aZlODGM-kOlwXmZZvLvZQwAAAAo"] [Sat Feb 21 11:17:49.660119 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZlODYZy3zgfuTKkxEXimQAAAAs"] [Sat Feb 21 11:17:51.014778 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backup/db_backup.sql"] [unique_id "aZlOD2M-kOlwXmZZvLvZRAAAAAo"] [Sat Feb 21 11:17:52.375285 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/fullbackup.sql"] [unique_id "aZlOEBHl2U-jS0ZSEvYC3QAAAAM"] [Sat Feb 21 11:17:53.731330 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/fullwebsite.sql"] [unique_id "aZlOEYZy3zgfuTKkxEXimwAAAAs"] [Sat Feb 21 11:17:54.977167 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/data.sql"] [unique_id "aZlOEl7N2x2Af1vETfMlfwAAAAU"] [Sat Feb 21 11:17:56.226697 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backup/data.sql"] [unique_id "aZlOFEyv4hZiX9Y80XXAWQAAAAk"] [Sat Feb 21 11:17:57.480247 2026] [security2:error] [pid 1943958:tid 1943958] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/data.sql"] [unique_id "aZlOFZv-4ricdaBAuZkNvQAAAAE"] [Sat Feb 21 11:17:57.896502 2026] [proxy_fcgi:error] [pid 1935147:tid 1935147] [client 183.87.224.95:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 11:17:58.720751 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backups/data.sql"] [unique_id "aZlOFoZy3zgfuTKkxEXinQAAAAs"] [Sat Feb 21 11:17:59.976150 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backup/database.sql"] [unique_id "aZlOFxHl2U-jS0ZSEvYC4AAAAAM"] [Sat Feb 21 11:18:01.484310 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backups/database.sql"] [unique_id "aZlOGYZy3zgfuTKkxEXingAAAAs"] [Sat Feb 21 11:18:03.077324 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/wordpress.sql"] [unique_id "aZlOG8M5vNyyeo5gKbcUPwAAAAc"] [Sat Feb 21 11:18:03.607730 2026] [security2:error] [pid 1943958:tid 1943958] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOG5v-4ricdaBAuZkNwAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:18:03.607805 2026] [security2:error] [pid 1943958:tid 1943958] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOG5v-4ricdaBAuZkNwAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:18:03.702792 2026] [security2:error] [pid 1941889:tid 1941889] [client 213.32.29.90:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlOGkyv4hZiX9Y80XXAXAAAAAk"] [Sat Feb 21 11:18:03.702873 2026] [security2:error] [pid 1941889:tid 1941889] [client 213.32.29.90:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlOGkyv4hZiX9Y80XXAXAAAAAk"] [Sat Feb 21 11:18:04.493578 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backups/wordpress.sql"] [unique_id "aZlOHF7N2x2Af1vETfMlhAAAAAU"] [Sat Feb 21 11:18:05.891367 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/dbdump.sql"] [unique_id "aZlOHYXWYBQ8sX5nXL9f7QAAAAQ"] [Sat Feb 21 11:18:07.239381 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/dbdump.sql"] [unique_id "aZlOHxHl2U-jS0ZSEvYC5AAAAAM"] [Sat Feb 21 11:18:08.554896 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backups/dbdump.sql"] [unique_id "aZlOIGM-kOlwXmZZvLvZTAAAAAo"] [Sat Feb 21 11:18:09.851902 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/backup/dbdump.sql"] [unique_id "aZlOIRHl2U-jS0ZSEvYC5QAAAAM"] [Sat Feb 21 11:18:19.230856 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOKxHl2U-jS0ZSEvYC6gAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4 [Sat Feb 21 11:18:19.230935 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOKxHl2U-jS0ZSEvYC6gAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4 [Sat Feb 21 11:18:25.665108 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 204.12.208.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-content/wp-configs.php, referer: https://akcpa.onebox.pk/wp-content/wp-configs.php [Sat Feb 21 11:18:25.666329 2026] [core:error] [pid 1935147:tid 1935147] [client 204.12.208.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://akcpa.onebox.pk/wp-content/wp-configs.php [Sat Feb 21 11:18:26.147382 2026] [access_compat:error] [pid 1926599:tid 1926599] [client 204.12.208.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-content/wp-configs.php, referer: https://akcpa.onebox.pk/wp-content/wp-configs.php [Sat Feb 21 11:18:26.148852 2026] [core:error] [pid 1926599:tid 1926599] [client 204.12.208.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://akcpa.onebox.pk/wp-content/wp-configs.php [Sat Feb 21 11:18:26.625825 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 204.12.208.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-content/wp-configs.php, referer: https://akcpa.onebox.pk/wp-content/wp-configs.php [Sat Feb 21 11:18:26.627147 2026] [core:error] [pid 1935147:tid 1935147] [client 204.12.208.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://akcpa.onebox.pk/wp-content/wp-configs.php [Sat Feb 21 11:18:30.298214 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/var/debug.log"] [unique_id "aZlONoXWYBQ8sX5nXL9f-QAAAAQ"] [Sat Feb 21 11:18:31.707432 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/content/debug.log"] [unique_id "aZlONwBA6wjZoL6uVnyvlgAAAAI"] [Sat Feb 21 11:18:33.198774 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/npm-debug.log"] [unique_id "aZlOOYXWYBQ8sX5nXL9f-gAAAAQ"] [Sat Feb 21 11:18:33.199349 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/npm-debug.log" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /npm-debug.log found within REQUEST_FILENAME: /npm-debug.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/npm-debug.log"] [unique_id "aZlOOYXWYBQ8sX5nXL9f-gAAAAQ"] [Sat Feb 21 11:18:34.601056 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/yarn-debug.log"] [unique_id "aZlOOl7N2x2Af1vETfMllQAAAAU"] [Sat Feb 21 11:18:35.878360 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/firebase-debug.log"] [unique_id "aZlOO4Zy3zgfuTKkxEXiswAAAAs"] [Sat Feb 21 11:18:39.064810 2026] [proxy_fcgi:error] [pid 1931467:tid 1931467] [client 201.218.125.149:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 11:18:42.463776 2026] [security2:error] [pid 1926599:tid 1926599] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/debug.sql"] [unique_id "aZlOQgBA6wjZoL6uVnyvmwAAAAI"] [Sat Feb 21 11:18:43.048638 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:18:44.944858 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:18:46.388362 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/mysql_debug.sql"] [unique_id "aZlORkyv4hZiX9Y80XXAcwAAAAk"] [Sat Feb 21 11:19:04.162959 2026] [cgi:error] [pid 1926602:tid 1926602] [client 66.132.153.114:0] AH02812: stderr from /home/mastercommnet/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://mastercomm.net.pk:80/cgi-bin [Sat Feb 21 11:19:06.276204 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/config.inc"] [unique_id "aZlOWoXWYBQ8sX5nXL9gCwAAAAQ"] [Sat Feb 21 11:19:11.983448 2026] [security2:error] [pid 1943958:tid 1943958] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOX5v-4ricdaBAuZkN5gAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fpower [Sat Feb 21 11:19:11.983549 2026] [security2:error] [pid 1943958:tid 1943958] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOX5v-4ricdaBAuZkN5gAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fpower [Sat Feb 21 11:19:15.345502 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/config/parameters.yml"] [unique_id "aZlOY17N2x2Af1vETfMlrwAAAAU"] [Sat Feb 21 11:19:16.606427 2026] [security2:error] [pid 1926783:tid 1926783] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/composer.json"] [unique_id "aZlOZMM5vNyyeo5gKbcUZgAAAAc"] [Sat Feb 21 11:19:21.897656 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/php.log"] [unique_id "aZlOaUyv4hZiX9Y80XXAiAAAAAk"] [Sat Feb 21 11:19:23.148230 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/build.log"] [unique_id "aZlOa2oVyMVcfJ9uH8alEwAAAAg"] [Sat Feb 21 11:19:32.186948 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlOcmM-kOlwXmZZvLvZdgAAAAo"] [Sat Feb 21 11:19:32.187006 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlOcmM-kOlwXmZZvLvZdgAAAAo"] [Sat Feb 21 11:19:42.513162 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/service.pwd"] [unique_id "aZlOfoXWYBQ8sX5nXL9gHQAAAAQ"] [Sat Feb 21 11:19:47.547433 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app/etc/local.xml.bak"] [unique_id "aZlOg4XWYBQ8sX5nXL9gHwAAAAQ"] [Sat Feb 21 11:19:48.922684 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/database.sql"] [unique_id "aZlOhGoVyMVcfJ9uH8alIgAAAAg"] [Sat Feb 21 11:19:50.174431 2026] [security2:error] [pid 1931467:tid 1931467] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/mysql.sql"] [unique_id "aZlOhoXWYBQ8sX5nXL9gIAAAAAQ"] [Sat Feb 21 11:19:51.527692 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/backup.sql"] [unique_id "aZlOh4Zy3zgfuTKkxEXi3AAAAAs"] [Sat Feb 21 11:19:52.914111 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/site.sql"] [unique_id "aZlOiN2_qyx-0h__vX2g0gAAAAA"] [Sat Feb 21 11:19:54.347731 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/wordpress.sql"] [unique_id "aZlOimoVyMVcfJ9uH8alJgAAAAg"] [Sat Feb 21 11:19:56.144073 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOjIXWYBQ8sX5nXL9gJAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:19:56.144165 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOjIXWYBQ8sX5nXL9gJAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:19:58.291964 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aZlOjhHl2U-jS0ZSEvYDIAAAAAM"] [Sat Feb 21 11:19:59.589774 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/oauth-private.key"] [unique_id "aZlOj2oVyMVcfJ9uH8alKAAAAAg"] [Sat Feb 21 11:20:01.007976 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/oauth-public.key"] [unique_id "aZlOkRHl2U-jS0ZSEvYDIQAAAAM"] [Sat Feb 21 11:20:02.791380 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/logs/stack.log"] [unique_id "aZlOkmM-kOlwXmZZvLvZigAAAAo"] [Sat Feb 21 11:20:04.557027 2026] [security2:error] [pid 1943958:tid 1943958] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/storage/debug.log"] [unique_id "aZlOlJv-4ricdaBAuZkOBAAAAAE"] [Sat Feb 21 11:20:17.517396 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:20:18.517841 2026] [security2:error] [pid 1931467:tid 1931467] [client 47.82.11.107:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlOoIXWYBQ8sX5nXL9gMQAAAAQ"], referer: http://rentacarkarachi.com/ [Sat Feb 21 11:20:18.517905 2026] [security2:error] [pid 1931467:tid 1931467] [client 47.82.11.107:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlOoIXWYBQ8sX5nXL9gMQAAAAQ"], referer: http://rentacarkarachi.com/ [Sat Feb 21 11:20:25.852813 2026] [security2:error] [pid 1933844:tid 1933844] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlOqGoVyMVcfJ9uH8alOAAAAAg"] [Sat Feb 21 11:20:25.852894 2026] [security2:error] [pid 1933844:tid 1933844] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlOqGoVyMVcfJ9uH8alOAAAAAg"] [Sat Feb 21 11:20:33.484387 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/vendor/.env.example"] [unique_id "aZlOsRHl2U-jS0ZSEvYDMQAAAAM"] [Sat Feb 21 11:20:39.307564 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/errors.log"] [unique_id "aZlOt92_qyx-0h__vX2g5wAAAAA"] [Sat Feb 21 11:20:40.690093 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/config.old"] [unique_id "aZlOuIZy3zgfuTKkxEXi_AAAAAs"] [Sat Feb 21 11:20:42.080684 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/export.sql"] [unique_id "aZlOut2_qyx-0h__vX2g6AAAAAA"] [Sat Feb 21 11:20:57.351725 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOyd2_qyx-0h__vX2g8AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:20:57.351828 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlOyd2_qyx-0h__vX2g8AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 11:21:09.500148 2026] [security2:error] [pid 1945361:tid 1945361] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/database_backup.sql"] [unique_id "aZlO1eDDGnxikc0KxPn1bwAAAAI"] [Sat Feb 21 11:21:20.433523 2026] [security2:error] [pid 1945361:tid 1945361] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/core/config.bak"] [unique_id "aZlO4ODDGnxikc0KxPn1fgAAAAI"] [Sat Feb 21 11:21:22.036285 2026] [negotiation:error] [pid 1941889:tid 1941889] [client 4.193.228.15:0] AH00687: Negotiation: discovered file(s) matching request: /home/thewoodshed/public_html/index (None could be negotiated). [Sat Feb 21 11:21:23.348837 2026] [security2:error] [pid 1943958:tid 1943958] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.git/HEAD"] [unique_id "aZlO45v-4ricdaBAuZkOOAAAAAE"] [Sat Feb 21 11:21:24.814034 2026] [security2:error] [pid 1945361:tid 1945361] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.svn/entries"] [unique_id "aZlO5ODDGnxikc0KxPn1hAAAAAI"] [Sat Feb 21 11:21:27.208338 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/hgrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.hg/hgrc"] [unique_id "aZlO54Zy3zgfuTKkxEXjIwAAAAs"] [Sat Feb 21 11:21:36.664889 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/public.key"] [unique_id "aZlO8GoVyMVcfJ9uH8alYwAAAAg"] [Sat Feb 21 11:21:37.197976 2026] [security2:error] [pid 1926783:tid 1926783] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlO78M5vNyyeo5gKbcUvgAAAAc"] [Sat Feb 21 11:21:37.198056 2026] [security2:error] [pid 1926783:tid 1926783] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlO78M5vNyyeo5gKbcUvgAAAAc"] [Sat Feb 21 11:21:38.106655 2026] [security2:error] [pid 1940612:tid 1940612] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/ssl.key"] [unique_id "aZlO8t2_qyx-0h__vX2hGgAAAAA"] [Sat Feb 21 11:21:41.589949 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlO9WM-kOlwXmZZvLvZ0wAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:21:41.590058 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlO9WM-kOlwXmZZvLvZ0wAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:21:42.144416 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlO9kyv4hZiX9Y80XXA8AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:21:42.144543 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlO9kyv4hZiX9Y80XXA8AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:21:42.310077 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/selfsigned.key"] [unique_id "aZlO9l7N2x2Af1vETfMmDgAAAAU"] [Sat Feb 21 11:21:43.771259 2026] [security2:error] [pid 1943958:tid 1943958] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/nginx.conf"] [unique_id "aZlO95v-4ricdaBAuZkORwAAAAE"] [Sat Feb 21 11:21:45.086885 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/httpd.conf"] [unique_id "aZlO-V7N2x2Af1vETfMmDwAAAAU"] [Sat Feb 21 11:21:53.074865 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlO_0yv4hZiX9Y80XXA9QAAAAk"] [Sat Feb 21 11:21:53.074923 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlO_0yv4hZiX9Y80XXA9QAAAAk"] [Sat Feb 21 11:21:55.775875 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/settings.ini"] [unique_id "aZlPA2M-kOlwXmZZvLvZ2wAAAAo"] [Sat Feb 21 11:22:02.842872 2026] [security2:error] [pid 1945361:tid 1945361] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/admin/settings.ini"] [unique_id "aZlPCuDDGnxikc0KxPn1mwAAAAI"] [Sat Feb 21 11:22:05.961956 2026] [security2:error] [pid 1942097:tid 1942097] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/admin/db.conf"] [unique_id "aZlPDYZy3zgfuTKkxEXjPgAAAAs"] [Sat Feb 21 11:22:07.371966 2026] [security2:error] [pid 1935147:tid 1935147] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/admin/sql.conf"] [unique_id "aZlPD17N2x2Af1vETfMmGwAAAAU"] [Sat Feb 21 11:22:08.716918 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/admin/.env.bak"] [unique_id "aZlPEBHl2U-jS0ZSEvYDcAAAAAM"] [Sat Feb 21 11:22:13.955590 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/private/secret.key"] [unique_id "aZlPFRHl2U-jS0ZSEvYDdAAAAAM"] [Sat Feb 21 11:22:16.227543 2026] [access_compat:error] [pid 1940612:tid 1940612] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:22:22.876619 2026] [security2:error] [pid 1928316:tid 1928316] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.well-known/.env"] [unique_id "aZlPHmM-kOlwXmZZvLvZ7gAAAAo"] [Sat Feb 21 11:22:27.996816 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPI2M-kOlwXmZZvLvZ8QAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:22:27.996894 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPI2M-kOlwXmZZvLvZ8QAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:22:28.441970 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPJIZy3zgfuTKkxEXjUQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 11:22:28.442049 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPJIZy3zgfuTKkxEXjUQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 11:22:30.692944 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/configuration.bak"] [unique_id "aZlPJhHl2U-jS0ZSEvYDggAAAAM"] [Sat Feb 21 11:22:48.930945 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPOEyv4hZiX9Y80XXBGAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:22:48.931035 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPOEyv4hZiX9Y80XXBGAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:22:51.775693 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPO4XWYBQ8sX5nXL9gnAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda [Sat Feb 21 11:22:51.775797 2026] [security2:error] [pid 1931467:tid 1931467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPO4XWYBQ8sX5nXL9gnAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda [Sat Feb 21 11:22:55.107956 2026] [security2:error] [pid 1942097:tid 1942097] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlPPYZy3zgfuTKkxEXjYwAAAAs"] [Sat Feb 21 11:22:55.108120 2026] [security2:error] [pid 1942097:tid 1942097] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlPPYZy3zgfuTKkxEXjYwAAAAs"] [Sat Feb 21 11:23:00.915066 2026] [security2:error] [pid 1943958:tid 1943958] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlPQ5v-4ricdaBAuZkOgQAAAAE"] [Sat Feb 21 11:23:00.915143 2026] [security2:error] [pid 1943958:tid 1943958] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlPQ5v-4ricdaBAuZkOgQAAAAE"] [Sat Feb 21 11:23:12.128632 2026] [security2:error] [pid 1941889:tid 1941889] [client 185.177.72.13:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/.env.sh"] [unique_id "aZlPUEyv4hZiX9Y80XXBJQAAAAk"] [Sat Feb 21 11:23:13.226636 2026] [security2:error] [pid 1943958:tid 1943958] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPUZv-4ricdaBAuZkOiwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 11:23:13.226810 2026] [security2:error] [pid 1943958:tid 1943958] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPUZv-4ricdaBAuZkOiwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 11:23:17.907592 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPVUyv4hZiX9Y80XXBKAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 11:23:17.907649 2026] [security2:error] [pid 1941889:tid 1941889] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPVUyv4hZiX9Y80XXBKAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 11:23:24.328184 2026] [authz_core:error] [pid 1945361:tid 1945361] [client 20.197.194.128:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/SimplePie/error_log [Sat Feb 21 11:23:26.576848 2026] [security2:error] [pid 1933844:tid 1933844] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/install.sql"] [unique_id "aZlPXmoVyMVcfJ9uH8alrAAAAAg"] [Sat Feb 21 11:23:27.769749 2026] [security2:error] [pid 1945361:tid 1945361] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/update.sql"] [unique_id "aZlPX-DDGnxikc0KxPn11gAAAAI"] [Sat Feb 21 11:23:29.117566 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.13:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "arcticairandrefrigeration.com"] [uri "/delete.sql"] [unique_id "aZlPYRHl2U-jS0ZSEvYDpwAAAAM"] [Sat Feb 21 11:23:36.372820 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPaGoVyMVcfJ9uH8alsQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fmq%2F5 [Sat Feb 21 11:23:36.372900 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPaGoVyMVcfJ9uH8alsQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fmq%2F5 [Sat Feb 21 11:23:37.882987 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPad2_qyx-0h__vX2haQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F6 [Sat Feb 21 11:23:37.883075 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPad2_qyx-0h__vX2haQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F6 [Sat Feb 21 11:23:42.278044 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:24:00.197880 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPgF7N2x2Af1vETfMmZgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:24:00.198018 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPgF7N2x2Af1vETfMmZgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:24:06.038444 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.038505 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.196832 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.196895 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.614444 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.614516 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.707407 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:06.707454 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.061892 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.061967 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.154796 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.154859 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.251534 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.251633 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.252886 2026] [security2:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZlPh2M-kOlwXmZZvLvaMAAAAAo"] [Sat Feb 21 11:24:07.252930 2026] [security2:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZlPh2M-kOlwXmZZvLvaMAAAAAo"] [Sat Feb 21 11:24:07.344672 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.344737 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.437410 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.437445 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.529890 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.529930 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.750770 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.750858 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.843955 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.843993 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.936931 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:07.937007 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.416658 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.416736 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.509136 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.509197 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.602386 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.602460 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.696295 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.696377 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.788518 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.788561 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.890872 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.890925 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.986494 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:08.986537 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.093020 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.093094 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.185515 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.185557 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.296619 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.296689 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.389784 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.389851 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.483581 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.483667 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.581587 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.581669 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.674048 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.674088 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.766204 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.766243 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.862215 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.862269 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.956023 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:09.956072 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.057831 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.057889 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.151075 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.151141 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.249853 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.249988 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.347687 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.347747 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.442057 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.442123 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.535744 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.535835 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.638854 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.638903 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.731921 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.731991 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.837328 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.837359 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.939040 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:10.939095 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.037663 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.037711 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.130989 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.131047 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.223646 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.223693 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.315545 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.315588 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.422209 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.422240 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.523146 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.523190 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.704836 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.704878 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.796734 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.796800 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.889264 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.889326 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.982112 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:11.982152 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.078021 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.078059 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.170798 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.170846 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.263480 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.263561 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.272898 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPjMM5vNyyeo5gKbcVJgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:24:12.273000 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPjMM5vNyyeo5gKbcVJgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:24:12.375456 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.375498 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.476155 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.476218 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.577025 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.577064 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.670829 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.670905 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.763521 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.763557 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.856456 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.856496 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.957953 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:12.958017 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.051314 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.051376 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.498497 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.498567 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.592197 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.592275 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.685256 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.685318 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.794872 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.794954 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.887597 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.887624 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.979365 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:13.979409 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.072202 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.072278 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.279308 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.279354 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.371776 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.371849 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.470000 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.470064 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.563855 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.563917 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.737868 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.737904 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.831731 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.831790 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.929943 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:14.930005 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.027960 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.028036 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.124899 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.124973 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.224892 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.224966 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.317118 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.317166 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.317679 2026] [security2:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZlPj4XWYBQ8sX5nXL9g2AAAAAQ"] [Sat Feb 21 11:24:15.317718 2026] [security2:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZlPj4XWYBQ8sX5nXL9g2AAAAAQ"] [Sat Feb 21 11:24:15.409718 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.409780 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.512607 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.512668 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.606558 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.606610 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.699912 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.699977 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.791772 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.791805 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.884897 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.884962 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.984794 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:15.984842 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.107093 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.107149 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.199135 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.199175 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.290816 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.290882 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.382800 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.382861 2026] [core:error] [pid 1931467:tid 1931467] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.489986 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.490030 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.583838 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.583871 2026] [core:error] [pid 1935147:tid 1935147] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.682625 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.682654 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.775420 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.775453 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.884993 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.885055 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.994111 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:16.994182 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.088357 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.088422 2026] [core:error] [pid 1943958:tid 1943958] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.188258 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.188315 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.284607 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.284667 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.387316 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.387371 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.479565 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.479612 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.620131 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.620177 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.712796 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.712838 2026] [core:error] [pid 1940612:tid 1940612] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.805672 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.805715 2026] [core:error] [pid 1928316:tid 1928316] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.914666 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:17.914707 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.007336 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.007393 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.406217 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.406260 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.510621 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.510677 2026] [core:error] [pid 1945361:tid 1945361] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.616248 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.616307 2026] [core:error] [pid 1933844:tid 1933844] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.708686 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.708736 2026] [core:error] [pid 1926783:tid 1926783] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.800992 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.801050 2026] [core:error] [pid 1946671:tid 1946671] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.903531 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.903583 2026] [core:error] [pid 1942097:tid 1942097] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.996813 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:18.996867 2026] [core:error] [pid 1926602:tid 1926602] [client 172.190.142.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:24:27.030935 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPmsM5vNyyeo5gKbcVNQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop4 [Sat Feb 21 11:24:27.031038 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPmsM5vNyyeo5gKbcVNQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop4 [Sat Feb 21 11:24:30.253154 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPnoZy3zgfuTKkxEXjqQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:24:30.253279 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPnoZy3zgfuTKkxEXjqQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:24:31.326923 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:24:34.315174 2026] [access_compat:error] [pid 1943958:tid 1943958] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:25:14.625690 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPymoVyMVcfJ9uH8al6gAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 11:25:14.625782 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlPymoVyMVcfJ9uH8al6gAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 11:25:21.188966 2026] [security2:error] [pid 1946671:tid 1946671] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlP0U5JA8ChNvCn9kyLEwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 11:25:21.189059 2026] [security2:error] [pid 1946671:tid 1946671] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlP0U5JA8ChNvCn9kyLEwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 11:25:34.645317 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:25:59.148776 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlP917N2x2Af1vETfMmqQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 11:25:59.148913 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlP917N2x2Af1vETfMmqQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 11:26:14.419057 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQBoZy3zgfuTKkxEXj3wAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4 [Sat Feb 21 11:26:14.419154 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQBoZy3zgfuTKkxEXj3wAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4 [Sat Feb 21 11:26:18.167723 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQCmM-kOlwXmZZvLvaggAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:26:18.167863 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQCmM-kOlwXmZZvLvaggAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:26:23.477502 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQD-DDGnxikc0KxPn2QwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 11:26:23.477573 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQD-DDGnxikc0KxPn2QwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 11:26:25.060065 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQEF7N2x2Af1vETfMmtgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 11:26:25.060133 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQEF7N2x2Af1vETfMmtgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 11:26:29.095660 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQFODDGnxikc0KxPn2RgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 11:26:29.095724 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQFODDGnxikc0KxPn2RgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 11:26:58.386663 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQMoZy3zgfuTKkxEXj9wAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 11:26:58.386795 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQMoZy3zgfuTKkxEXj9wAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 11:27:14.522287 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQQsM5vNyyeo5gKbcVigAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 11:27:14.522371 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQQsM5vNyyeo5gKbcVigAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 11:27:19.673841 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/uploads/index.php [Sat Feb 21 11:27:19.674212 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/uploads/index.php5 [Sat Feb 21 11:27:19.674951 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/uploads/index.phtml [Sat Feb 21 11:27:21.933793 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:27:22.115386 2026] [autoindex:error] [pid 1940612:tid 1940612] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:23.324127 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:24.529526 2026] [autoindex:error] [pid 1933844:tid 1933844] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:27.054363 2026] [autoindex:error] [pid 1943958:tid 1943958] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:28.718324 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:30.032695 2026] [autoindex:error] [pid 1940612:tid 1940612] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:31.425203 2026] [autoindex:error] [pid 1935147:tid 1935147] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:34.114428 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQVmoVyMVcfJ9uH8amNQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:27:34.114511 2026] [security2:error] [pid 1933844:tid 1933844] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQVmoVyMVcfJ9uH8amNQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:27:38.123174 2026] [autoindex:error] [pid 1928316:tid 1928316] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:39.734025 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:41.237300 2026] [autoindex:error] [pid 1940612:tid 1940612] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:42.437806 2026] [autoindex:error] [pid 1933844:tid 1933844] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:43.620231 2026] [autoindex:error] [pid 1945361:tid 1945361] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:44.859030 2026] [autoindex:error] [pid 1942097:tid 1942097] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:48.866244 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:27:56.684743 2026] [security2:error] [pid 1926783:tid 1926783] [client 50.6.7.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlQa8M5vNyyeo5gKbcVpgAAAAc"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:27:56.684828 2026] [security2:error] [pid 1926783:tid 1926783] [client 50.6.7.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlQa8M5vNyyeo5gKbcVpgAAAAc"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:27:58.246995 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQbt2_qyx-0h__vX2h-AAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:27:58.247110 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQbt2_qyx-0h__vX2h-AAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:28:09.558643 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:28:30.660818 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQjoZy3zgfuTKkxEXkLgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:28:30.660905 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQjoZy3zgfuTKkxEXkLgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:28:37.640786 2026] [autoindex:error] [pid 1935147:tid 1935147] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:41.927428 2026] [autoindex:error] [pid 1940612:tid 1940612] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:43.327673 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/akismet/index.php [Sat Feb 21 11:28:43.328001 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/akismet/index.php5 [Sat Feb 21 11:28:43.328506 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/akismet/index.phtml [Sat Feb 21 11:28:44.725988 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:46.119150 2026] [autoindex:error] [pid 1926783:tid 1926783] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:47.615571 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:49.246654 2026] [autoindex:error] [pid 1935147:tid 1935147] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:50.624325 2026] [autoindex:error] [pid 1945361:tid 1945361] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:52.023924 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:53.318201 2026] [autoindex:error] [pid 1949603:tid 1949603] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:54.725355 2026] [autoindex:error] [pid 1943958:tid 1943958] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:55.510684 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:28:55.582716 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:28:55.971715 2026] [security2:error] [pid 1943958:tid 1943958] [client 91.239.130.201:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlQppv-4ricdaBAuZkPPwAAAAE"] [Sat Feb 21 11:28:55.971773 2026] [security2:error] [pid 1943958:tid 1943958] [client 91.239.130.201:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlQppv-4ricdaBAuZkPPwAAAAE"] [Sat Feb 21 11:28:57.313949 2026] [autoindex:error] [pid 1949603:tid 1949603] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:28:58.921481 2026] [autoindex:error] [pid 1950054:tid 1950054] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:00.324049 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:01.854109 2026] [autoindex:error] [pid 1940612:tid 1940612] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:02.160753 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQrl7N2x2Af1vETfMnDgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:29:02.160824 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlQrl7N2x2Af1vETfMnDgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:29:03.461430 2026] [autoindex:error] [pid 1935147:tid 1935147] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:05.020986 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:06.331373 2026] [autoindex:error] [pid 1945361:tid 1945361] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:08.115013 2026] [autoindex:error] [pid 1926783:tid 1926783] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:17.735374 2026] [security2:error] [pid 1935147:tid 1935147] [client 51.75.151.149:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-content/plugins/cidaas-pro-master/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "maktechpartners.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZlQvV7N2x2Af1vETfMnFgAAAAU"] [Sat Feb 21 11:29:18.634473 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:29:20.520887 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/classic-editor/index.php [Sat Feb 21 11:29:20.521144 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/classic-editor/index.php7 [Sat Feb 21 11:29:20.521208 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/classic-editor/index.php5 [Sat Feb 21 11:29:20.521897 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/classic-editor/index.phtml [Sat Feb 21 11:29:23.315710 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/contact-form-7/admin/js/index.php [Sat Feb 21 11:29:23.316013 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/contact-form-7/admin/js/index.php5 [Sat Feb 21 11:29:23.316581 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/contact-form-7/admin/js/index.phtml [Sat Feb 21 11:29:24.615017 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/contact-form-7/index.php [Sat Feb 21 11:29:24.615412 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/contact-form-7/index.php5 [Sat Feb 21 11:29:24.616041 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/contact-form-7/index.phtml [Sat Feb 21 11:29:28.321768 2026] [autoindex:error] [pid 1950054:tid 1950054] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:48.519876 2026] [access_compat:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 11:29:48.520267 2026] [access_compat:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php5 [Sat Feb 21 11:29:48.520778 2026] [access_compat:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.phtml [Sat Feb 21 11:29:49.825391 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/index.php [Sat Feb 21 11:29:49.825736 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/index.php5 [Sat Feb 21 11:29:49.826243 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 91.239.130.201:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/index.phtml [Sat Feb 21 11:29:51.222756 2026] [autoindex:error] [pid 1946671:tid 1946671] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:56.141568 2026] [autoindex:error] [pid 1945361:tid 1945361] [client 91.239.130.201:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 11:29:57.878286 2026] [cgi:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH02812: stderr from /home/oneboxpk/public_html/akcpa.onebox.pk/cgi-bin/: attempt to invoke directory as script, referer: https://www.akcpa.onebox.pk/cgi-bin [Sat Feb 21 11:29:57.879569 2026] [core:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.akcpa.onebox.pk/cgi-bin [Sat Feb 21 11:30:04.905785 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:30:28.220504 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRBMtCgl1jApX7wei7MAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda [Sat Feb 21 11:30:28.220586 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRBMtCgl1jApX7wei7MAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda [Sat Feb 21 11:30:57.599843 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRIRHl2U-jS0ZSEvYEnwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem [Sat Feb 21 11:30:57.599934 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRIRHl2U-jS0ZSEvYEnwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem [Sat Feb 21 11:31:42.890792 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRTuDDGnxikc0KxPn27QAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem [Sat Feb 21 11:31:42.890931 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRTuDDGnxikc0KxPn27QAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem [Sat Feb 21 11:32:10.847281 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:32:22.746191 2026] [security2:error] [pid 1945361:tid 1945361] [client 51.103.25.59:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlRdeDDGnxikc0KxPn3AwAAAAI"] [Sat Feb 21 11:32:22.746303 2026] [security2:error] [pid 1945361:tid 1945361] [client 51.103.25.59:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlRdeDDGnxikc0KxPn3AwAAAAI"] [Sat Feb 21 11:32:26.780843 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.git/config"] [unique_id "aZlRehHl2U-jS0ZSEvYEzQAAAAM"] [Sat Feb 21 11:32:41.893310 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env"] [unique_id "aZlRictCgl1jApX7wei7fQAAAAg"] [Sat Feb 21 11:32:43.780402 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/portal/.env"] [unique_id "aZlRi8tCgl1jApX7wei7fgAAAAg"] [Sat Feb 21 11:32:44.596940 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/env/.env"] [unique_id "aZlRjBHl2U-jS0ZSEvYE1QAAAAM"] [Sat Feb 21 11:32:44.843040 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRjOnNlyfrsrZbi4_h0gAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 11:32:44.843151 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlRjOnNlyfrsrZbi4_h0gAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 11:32:45.247184 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/.env"] [unique_id "aZlRjWM-kOlwXmZZvLvbUgAAAAo"] [Sat Feb 21 11:32:45.878666 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/app/.env"] [unique_id "aZlRjcM5vNyyeo5gKbcWPgAAAAc"] [Sat Feb 21 11:32:46.529663 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/dev/.env"] [unique_id "aZlRjt2_qyx-0h__vX2imgAAAAA"] [Sat Feb 21 11:32:47.417956 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/new/.env"] [unique_id "aZlRj8tCgl1jApX7wei7gAAAAAg"] [Sat Feb 21 11:32:48.406869 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/new/.env.local"] [unique_id "aZlRkN2_qyx-0h__vX2imwAAAAA"] [Sat Feb 21 11:32:49.141153 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/new/.env.production"] [unique_id "aZlRkWM-kOlwXmZZvLvbVAAAAAo"] [Sat Feb 21 11:32:49.932607 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/new/.env.staging"] [unique_id "aZlRkV7N2x2Af1vETfMniQAAAAU"] [Sat Feb 21 11:32:50.610765 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 11:32:50.610876 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 11:32:50.610929 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 11:32:50.611200 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 11:32:50.611258 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 11:32:50.611310 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 11:32:50.611516 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 11:32:50.611556 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 11:32:50.611644 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 11:32:50.611698 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 11:32:50.611761 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 11:32:50.611814 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 11:32:50.611870 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 11:32:50.611925 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 11:32:50.611974 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 11:32:50.612009 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 11:32:50.612281 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 11:32:50.612344 2026] [authz_core:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 11:32:50.612387 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 11:32:50.612435 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 11:32:50.612485 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 11:32:50.612522 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 11:32:50.612570 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 11:32:50.612640 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 11:32:50.612688 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 11:32:50.613144 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 11:32:50.613201 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 11:32:50.613352 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 11:32:50.613387 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 11:32:55.043666 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/awstats/.env"] [unique_id "aZlRl8M5vNyyeo5gKbcWRAAAAAc"] [Sat Feb 21 11:32:55.891351 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/conf/.env"] [unique_id "aZlRl-DDGnxikc0KxPn3FgAAAAI"] [Sat Feb 21 11:32:56.038733 2026] [security2:error] [pid 1928316:tid 1928316] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-global": Permission denied [hostname "mail.mastercomm.net.pk"] [uri "/x.php"] [unique_id "aZlRmGM-kOlwXmZZvLvbWQAAAAo"] [Sat Feb 21 11:32:56.038790 2026] [security2:error] [pid 1928316:tid 1928316] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-ip": Permission denied [hostname "mail.mastercomm.net.pk"] [uri "/x.php"] [unique_id "aZlRmGM-kOlwXmZZvLvbWQAAAAo"] [Sat Feb 21 11:32:56.581003 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/cron/.env"] [unique_id "aZlRmMtCgl1jApX7wei7hwAAAAg"] [Sat Feb 21 11:32:57.279550 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/www/.env"] [unique_id "aZlRmenNlyfrsrZbi4_h2wAAAAQ"] [Sat Feb 21 11:32:57.994984 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/docker/.env"] [unique_id "aZlRmeDDGnxikc0KxPn3GAAAAAI"] [Sat Feb 21 11:32:58.702473 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/docker/app/.env"] [unique_id "aZlRmstCgl1jApX7wei7iQAAAAg"] [Sat Feb 21 11:32:59.348008 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/env.backup"] [unique_id "aZlRm17N2x2Af1vETfMnkQAAAAU"] [Sat Feb 21 11:33:02.841925 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.vscode/.env"] [unique_id "aZlRnsM5vNyyeo5gKbcWTAAAAAc"] [Sat Feb 21 11:33:03.460579 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/js/.env"] [unique_id "aZlRn4Zy3zgfuTKkxEXkygAAAAs"] [Sat Feb 21 11:33:04.312439 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/laravel/.env"] [unique_id "aZlRoF7N2x2Af1vETfMnlgAAAAU"] [Sat Feb 21 11:33:05.012397 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/laravel/core/.env"] [unique_id "aZlRod2_qyx-0h__vX2iqAAAAAA"] [Sat Feb 21 11:33:05.515283 2026] [security2:error] [pid 1935147:tid 1935147] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-global": Permission denied [hostname "mail.mastercomm.net.pk"] [uri "/wp-includes/admin.php"] [unique_id "aZlRoV7N2x2Af1vETfMnlwAAAAU"] [Sat Feb 21 11:33:05.515353 2026] [security2:error] [pid 1935147:tid 1935147] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-ip": Permission denied [hostname "mail.mastercomm.net.pk"] [uri "/wp-includes/admin.php"] [unique_id "aZlRoV7N2x2Af1vETfMnlwAAAAU"] [Sat Feb 21 11:33:05.672320 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/mail/.env"] [unique_id "aZlRoeDDGnxikc0KxPn3IAAAAAI"] [Sat Feb 21 11:33:06.308281 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/mailer/.env"] [unique_id "aZlRooZy3zgfuTKkxEXkzgAAAAs"] [Sat Feb 21 11:33:06.933589 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/nginx/.env"] [unique_id "aZlRounNlyfrsrZbi4_h5wAAAAQ"] [Sat Feb 21 11:33:07.672374 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/public/.env"] [unique_id "aZlRo-DDGnxikc0KxPn3IgAAAAI"] [Sat Feb 21 11:33:08.302925 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/site/.env"] [unique_id "aZlRpBHl2U-jS0ZSEvYE6gAAAAM"] [Sat Feb 21 11:33:08.924254 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/xampp/.env"] [unique_id "aZlRpMtCgl1jApX7wei7lQAAAAg"] [Sat Feb 21 11:33:09.592923 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/main/.env"] [unique_id "aZlRpU5JA8ChNvCn9kyMFAAAAAY"] [Sat Feb 21 11:33:10.273479 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/node_modules/.env"] [unique_id "aZlRpunNlyfrsrZbi4_h6gAAAAQ"] [Sat Feb 21 11:33:10.958046 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kyc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/kyc/.env"] [unique_id "aZlRpmM-kOlwXmZZvLvbaAAAAAo"] [Sat Feb 21 11:33:11.623096 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/admin/.env"] [unique_id "aZlRp17N2x2Af1vETfMnngAAAAU"] [Sat Feb 21 11:33:12.276218 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:33:12.338763 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/prod/.env"] [unique_id "aZlRqIZy3zgfuTKkxEXk1QAAAAs"] [Sat Feb 21 11:33:13.033045 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.bak"] [unique_id "aZlRqctCgl1jApX7wei7mQAAAAg"] [Sat Feb 21 11:33:15.618840 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/website/.env"] [unique_id "aZlRq-nNlyfrsrZbi4_h7wAAAAQ"] [Sat Feb 21 11:33:16.284654 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/development/.env"] [unique_id "aZlRrE5JA8ChNvCn9kyMGwAAAAY"] [Sat Feb 21 11:33:16.956528 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/backend/.env"] [unique_id "aZlRrIZy3zgfuTKkxEXk2gAAAAs"] [Sat Feb 21 11:33:17.763975 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/shared/config/.env"] [unique_id "aZlRreDDGnxikc0KxPn3LgAAAAI"] [Sat Feb 21 11:33:18.354884 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/shared/.env"] [unique_id "aZlRrhHl2U-jS0ZSEvYE9AAAAAM"] [Sat Feb 21 11:33:20.128429 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/node/.env_example"] [unique_id "aZlRsOnNlyfrsrZbi4_h9AAAAAQ"] [Sat Feb 21 11:33:21.027607 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.production.local"] [unique_id "aZlRseDDGnxikc0KxPn3MQAAAAI"] [Sat Feb 21 11:33:21.781619 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.local"] [unique_id "aZlRsRHl2U-jS0ZSEvYE9wAAAAM"] [Sat Feb 21 11:33:22.538943 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.example"] [unique_id "aZlRsstCgl1jApX7wei7owAAAAg"] [Sat Feb 21 11:33:23.360714 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.stage"] [unique_id "aZlRs92_qyx-0h__vX2iuAAAAAA"] [Sat Feb 21 11:33:24.663127 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.old"] [unique_id "aZlRtF7N2x2Af1vETfMnqQAAAAU"] [Sat Feb 21 11:33:25.321100 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env_sample"] [unique_id "aZlRtd2_qyx-0h__vX2iuQAAAAA"] [Sat Feb 21 11:33:26.841687 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.prod"] [unique_id "aZlRtl7N2x2Af1vETfMnqgAAAAU"] [Sat Feb 21 11:33:27.555488 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/crm/.env"] [unique_id "aZlRt8M5vNyyeo5gKbcWZwAAAAc"] [Sat Feb 21 11:33:28.283906 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/local/.env"] [unique_id "aZlRuBHl2U-jS0ZSEvYE-wAAAAM"] [Sat Feb 21 11:33:28.960068 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/core/.env"] [unique_id "aZlRuOnNlyfrsrZbi4_h-QAAAAQ"] [Sat Feb 21 11:33:29.568095 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/apps/.env"] [unique_id "aZlRueDDGnxikc0KxPn3NgAAAAI"] [Sat Feb 21 11:33:30.243958 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/application/.env"] [unique_id "aZlRul7N2x2Af1vETfMnrAAAAAU"] [Sat Feb 21 11:33:31.024802 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/web/.env"] [unique_id "aZlRu-DDGnxikc0KxPn3NwAAAAI"] [Sat Feb 21 11:33:32.789647 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/wp-config.php.bak"] [unique_id "aZlRvODDGnxikc0KxPn3OAAAAAI"] [Sat Feb 21 11:33:36.793743 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 11:33:36.793805 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 11:33:36.793830 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 11:33:36.793937 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 11:33:36.793973 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 11:33:36.794000 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 11:33:36.794157 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 11:33:36.794179 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 11:33:36.794195 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 11:33:36.794245 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 11:33:36.794281 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 11:33:36.794320 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 11:33:36.794345 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 11:33:36.794370 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 11:33:36.794397 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 11:33:36.794433 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 11:33:36.794568 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 11:33:36.794589 2026] [authz_core:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 11:33:36.794605 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 11:33:36.794620 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 11:33:36.794633 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 11:33:36.794652 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 11:33:36.794667 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 11:33:36.794681 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 11:33:36.794695 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 11:33:36.794709 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 11:33:36.794721 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 11:33:36.794754 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 11:33:36.794780 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 11:33:46.265849 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 11:33:46.265936 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 11:33:46.265967 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 11:33:46.266103 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 11:33:46.266134 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 11:33:46.266162 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 11:33:46.266306 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 11:33:46.266339 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 11:33:46.266365 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 11:33:46.266388 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 11:33:46.266414 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 11:33:46.266456 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 11:33:46.266481 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 11:33:46.266506 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 11:33:46.266532 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 11:33:46.266558 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 11:33:46.266763 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 11:33:46.266799 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 11:33:46.266825 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 11:33:46.266876 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 11:33:46.266901 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 11:33:46.266928 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 11:33:46.266955 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 11:33:46.266982 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 11:33:46.267006 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 11:33:46.267032 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 11:33:46.267054 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 11:33:46.267116 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 11:33:46.267143 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 11:33:46.270591 2026] [security2:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/"] [unique_id "aZlRyunNlyfrsrZbi4_iAwAAAAQ"] [Sat Feb 21 11:33:46.270633 2026] [security2:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/"] [unique_id "aZlRyunNlyfrsrZbi4_iAwAAAAQ"] [Sat Feb 21 11:33:52.604203 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlR0MM5vNyyeo5gKbcWdwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver [Sat Feb 21 11:33:52.604296 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlR0MM5vNyyeo5gKbcWdwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver [Sat Feb 21 11:34:02.670863 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 11:34:02.670970 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 11:34:02.671002 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 11:34:02.671139 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 11:34:02.671171 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 11:34:02.671198 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 11:34:02.671340 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 11:34:02.671371 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 11:34:02.671397 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 11:34:02.671435 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 11:34:02.671461 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 11:34:02.671488 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 11:34:02.671512 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 11:34:02.671537 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 11:34:02.671563 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 11:34:02.671613 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 11:34:02.671805 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 11:34:02.671840 2026] [authz_core:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 11:34:02.671866 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 11:34:02.671892 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 11:34:02.671916 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 11:34:02.671942 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 11:34:02.671967 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 11:34:02.671991 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 11:34:02.672014 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 11:34:02.672039 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 11:34:02.672059 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 11:34:02.672117 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 11:34:02.672144 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 11:34:05.700447 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/storage/logs/laravel.log"] [unique_id "aZlR3WM-kOlwXmZZvLvbjwAAAAo"] [Sat Feb 21 11:34:11.034275 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlR4unNlyfrsrZbi4_iEAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:34:11.034339 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlR4unNlyfrsrZbi4_iEAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:34:25.951980 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlR8YZy3zgfuTKkxEXlBAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:34:25.952080 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlR8YZy3zgfuTKkxEXlBAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:34:37.305704 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/app/config/parameters.yml"] [unique_id "aZlR_enNlyfrsrZbi4_iIAAAAAQ"] [Sat Feb 21 11:34:38.084077 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/config/parameters.yml"] [unique_id "aZlR_l7N2x2Af1vETfMn1AAAAAU"] [Sat Feb 21 11:34:42.526147 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /api/config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/config/config.yml"] [unique_id "aZlSAhHl2U-jS0ZSEvYFKQAAAAM"] [Sat Feb 21 11:34:45.809847 2026] [security2:error] [pid 1945361:tid 1945361] [client 216.73.216.155:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-global": Permission denied [hostname "edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlSBeDDGnxikc0KxPn3YQAAAAI"] [Sat Feb 21 11:34:45.809907 2026] [security2:error] [pid 1945361:tid 1945361] [client 216.73.216.155:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-ip": Permission denied [hostname "edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlSBeDDGnxikc0KxPn3YQAAAAI"] [Sat Feb 21 11:34:52.225768 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSDN2_qyx-0h__vX2i7QAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:34:52.225844 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSDN2_qyx-0h__vX2i7QAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:34:59.332932 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:35:05.592024 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSGcM5vNyyeo5gKbcWowAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:35:05.592082 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSGcM5vNyyeo5gKbcWowAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:35:09.494586 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSHctCgl1jApX7wei74gAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 11:35:09.494687 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSHctCgl1jApX7wei74gAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 11:35:09.895005 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/storage/app/keys/stripe.key"] [unique_id "aZlSHV7N2x2Af1vETfMn6QAAAAU"] [Sat Feb 21 11:35:29.316835 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlSMGM-kOlwXmZZvLvbwQAAAAo"] [Sat Feb 21 11:35:29.316941 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlSMGM-kOlwXmZZvLvbwQAAAAo"] [Sat Feb 21 11:35:32.598834 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.git/config"] [unique_id "aZlSNE5JA8ChNvCn9kyMcAAAAAY"] [Sat Feb 21 11:35:33.338264 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.git/HEAD"] [unique_id "aZlSNWM-kOlwXmZZvLvbxAAAAAo"] [Sat Feb 21 11:35:33.934234 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/composer.json"] [unique_id "aZlSNenNlyfrsrZbi4_iRQAAAAQ"] [Sat Feb 21 11:35:36.725299 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSOMtCgl1jApX7wei79AAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:35:36.725417 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSOMtCgl1jApX7wei79AAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:35:43.405024 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/tox.ini"] [unique_id "aZlSP05JA8ChNvCn9kyMdwAAAAY"] [Sat Feb 21 11:35:51.513204 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/storage/logs/stripe.log"] [unique_id "aZlSR92_qyx-0h__vX2jEwAAAAA"] [Sat Feb 21 11:35:52.389684 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/storage/logs/payments.log"] [unique_id "aZlSSOnNlyfrsrZbi4_iUQAAAAQ"] [Sat Feb 21 11:35:53.976374 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.backup"] [unique_id "aZlSSU5JA8ChNvCn9kyMfgAAAAY"] [Sat Feb 21 11:35:54.755870 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.old"] [unique_id "aZlSShHl2U-jS0ZSEvYFVgAAAAM"] [Sat Feb 21 11:35:55.504022 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.bak"] [unique_id "aZlSS-DDGnxikc0KxPn3jQAAAAI"] [Sat Feb 21 11:35:56.183748 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stripe"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.stripe"] [unique_id "aZlSTF7N2x2Af1vETfMoCAAAAAU"] [Sat Feb 21 11:35:57.332733 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.production"] [unique_id "aZlSTU5JA8ChNvCn9kyMgAAAAAY"] [Sat Feb 21 11:36:01.514542 2026] [security2:error] [pid 1935147:tid 1935147] [client 129.121.74.194:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlSUF7N2x2Af1vETfMoCgAAAAU"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:36:01.514614 2026] [security2:error] [pid 1935147:tid 1935147] [client 129.121.74.194:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlSUF7N2x2Af1vETfMoCgAAAAU"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:36:01.983970 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:36:07.768967 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.key"] [unique_id "aZlSV2M-kOlwXmZZvLvb2wAAAAo"] [Sat Feb 21 11:36:11.449582 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.conf"] [unique_id "aZlSW-nNlyfrsrZbi4_iXAAAAAQ"] [Sat Feb 21 11:36:12.140552 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.ini"] [unique_id "aZlSXF7N2x2Af1vETfMoEgAAAAU"] [Sat Feb 21 11:36:14.456672 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/stripe.log"] [unique_id "aZlSXl7N2x2Af1vETfMoEwAAAAU"] [Sat Feb 21 11:36:16.159837 2026] [security2:error] [pid 1926602:tid 1926602] [client 40.77.167.75:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'no(1o' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: no(1o found within ARGS:e: bacc-+-(4%\\x1b'1\\x12\\x19\\x18##!A+H\\x07\\x01#8\\x07@\\x17\\x1e!+2\\x19\\x04#-angklung-class-april-sat-1-30-pm-zz-aM6gDXCo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZlSYBHl2U-jS0ZSEvYFZAAAAAM"] [Sat Feb 21 11:36:16.160005 2026] [security2:error] [pid 1926602:tid 1926602] [client 40.77.167.75:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'no(1o' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: no(1o found within ARGS:e: bacc-+-(4%\\x1b'1\\x12\\x19\\x18"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZlSYBHl2U-jS0ZSEvYFZAAAAAM"] [Sat Feb 21 11:36:19.714293 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.aws"] [unique_id "aZlSY8tCgl1jApX7wei8DgAAAAg"] [Sat Feb 21 11:36:20.913621 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.dev"] [unique_id "aZlSZIZy3zgfuTKkxEXlUAAAAAs"] [Sat Feb 21 11:36:21.924234 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.staging"] [unique_id "aZlSZV7N2x2Af1vETfMoGAAAAAU"] [Sat Feb 21 11:36:24.246651 2026] [security2:error] [pid 1926783:tid 1926783] [client 52.167.144.162:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'no(1o' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: no(1o found within ARGS:e: bacc-+-(4%\\x1b'1\\x12\\x19\\x18##!A+H\\x07\\x01#8\\x07@\\x17\\x1e!+2\\x19\\x04#-angklung-class-april-sat-1-30-pm-zz-aM6gDXCo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZlSaMM5vNyyeo5gKbcW1AAAAAc"] [Sat Feb 21 11:36:24.246853 2026] [security2:error] [pid 1926783:tid 1926783] [client 52.167.144.162:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'no(1o' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: no(1o found within ARGS:e: bacc-+-(4%\\x1b'1\\x12\\x19\\x18"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZlSaMM5vNyyeo5gKbcW1AAAAAc"] [Sat Feb 21 11:36:29.909942 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/aws.key"] [unique_id "aZlSbV7N2x2Af1vETfMoHAAAAAU"] [Sat Feb 21 11:36:31.449735 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/aws.backup"] [unique_id "aZlSb17N2x2Af1vETfMoHQAAAAU"] [Sat Feb 21 11:36:32.013127 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/aws.old"] [unique_id "aZlScOnNlyfrsrZbi4_iZwAAAAQ"] [Sat Feb 21 11:36:32.626820 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "denederveensehoevesite.nl"] [uri "/aws.bak"] [unique_id "aZlScGM-kOlwXmZZvLvb6wAAAAo"] [Sat Feb 21 11:36:35.981271 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.test"] [unique_id "aZlSc05JA8ChNvCn9kyMmAAAAAY"] [Sat Feb 21 11:36:36.602863 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.development"] [unique_id "aZlSdN2_qyx-0h__vX2jMgAAAAA"] [Sat Feb 21 11:36:37.238431 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.uat"] [unique_id "aZlSdYZy3zgfuTKkxEXlWgAAAAs"] [Sat Feb 21 11:36:37.992610 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.backup"] [unique_id "aZlSdctCgl1jApX7wei8GgAAAAg"] [Sat Feb 21 11:36:38.627451 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.save"] [unique_id "aZlSdunNlyfrsrZbi4_iawAAAAQ"] [Sat Feb 21 11:36:39.220842 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.dist"] [unique_id "aZlSd4Zy3zgfuTKkxEXlWwAAAAs"] [Sat Feb 21 11:36:39.807224 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.template"] [unique_id "aZlSd8tCgl1jApX7wei8GwAAAAg"] [Sat Feb 21 11:36:40.414919 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/v1/.env"] [unique_id "aZlSeODDGnxikc0KxPn3qQAAAAI"] [Sat Feb 21 11:36:40.973588 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/v2/.env"] [unique_id "aZlSeIZy3zgfuTKkxEXlXAAAAAs"] [Sat Feb 21 11:36:41.581579 2026] [security2:error] [pid 1940612:tid 1940612] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/v1/.env"] [unique_id "aZlSed2_qyx-0h__vX2jNQAAAAA"] [Sat Feb 21 11:36:42.204679 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/v2/.env"] [unique_id "aZlSeuDDGnxikc0KxPn3qgAAAAI"] [Sat Feb 21 11:36:42.825965 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/rest/.env"] [unique_id "aZlSemM-kOlwXmZZvLvb8gAAAAo"] [Sat Feb 21 11:36:43.433423 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /graphql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/graphql/.env"] [unique_id "aZlSe-DDGnxikc0KxPn3qwAAAAI"] [Sat Feb 21 11:36:43.986199 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/src/.env"] [unique_id "aZlSe8M5vNyyeo5gKbcW3wAAAAc"] [Sat Feb 21 11:36:44.534300 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/src/config/.env"] [unique_id "aZlSfF7N2x2Af1vETfMoJgAAAAU"] [Sat Feb 21 11:36:45.267115 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/config/.env"] [unique_id "aZlSfenNlyfrsrZbi4_icAAAAAQ"] [Sat Feb 21 11:36:46.230882 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/tmp/.env"] [unique_id "aZlSfoZy3zgfuTKkxEXlXwAAAAs"] [Sat Feb 21 11:36:47.092285 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/temp/.env"] [unique_id "aZlSf8tCgl1jApX7wei8IAAAAAg"] [Sat Feb 21 11:36:47.791552 2026] [security2:error] [pid 1935147:tid 1935147] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/var/.env"] [unique_id "aZlSf17N2x2Af1vETfMoKAAAAAU"] [Sat Feb 21 11:36:48.600392 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/backup/.env"] [unique_id "aZlSgBHl2U-jS0ZSEvYFeAAAAAM"] [Sat Feb 21 11:36:49.251315 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/old/.env"] [unique_id "aZlSgctCgl1jApX7wei8IQAAAAg"] [Sat Feb 21 11:36:49.936962 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/test/.env"] [unique_id "aZlSgYZy3zgfuTKkxEXlYQAAAAs"] [Sat Feb 21 11:36:50.751660 2026] [security2:error] [pid 1926602:tid 1926602] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/tests/.env"] [unique_id "aZlSghHl2U-jS0ZSEvYFeQAAAAM"] [Sat Feb 21 11:36:51.358827 2026] [security2:error] [pid 1950054:tid 1950054] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/db/.env"] [unique_id "aZlSg8tCgl1jApX7wei8IgAAAAg"] [Sat Feb 21 11:36:52.129021 2026] [security2:error] [pid 1928316:tid 1928316] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/database/.env"] [unique_id "aZlShGM-kOlwXmZZvLvb9wAAAAo"] [Sat Feb 21 11:36:53.032390 2026] [security2:error] [pid 1946671:tid 1946671] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/storage/.env"] [unique_id "aZlShU5JA8ChNvCn9kyMoAAAAAY"] [Sat Feb 21 11:36:54.084858 2026] [security2:error] [pid 1942097:tid 1942097] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.php"] [unique_id "aZlShoZy3zgfuTKkxEXlYwAAAAs"] [Sat Feb 21 11:36:55.380711 2026] [security2:error] [pid 1926783:tid 1926783] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.js"] [unique_id "aZlSh8M5vNyyeo5gKbcW5QAAAAc"] [Sat Feb 21 11:36:56.094797 2026] [security2:error] [pid 1945361:tid 1945361] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env.json"] [unique_id "aZlSiODDGnxikc0KxPn3sgAAAAI"] [Sat Feb 21 11:37:19.292671 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSn17N2x2Af1vETfMoOQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 11:37:19.292735 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSn17N2x2Af1vETfMoOQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 11:37:22.474719 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSounNlyfrsrZbi4_ihAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 11:37:22.474816 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSounNlyfrsrZbi4_ihAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 11:37:25.643392 2026] [security2:error] [pid 1940612:tid 1940612] [client 84.200.16.110:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlSpN2_qyx-0h__vX2jTgAAAAA"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:37:25.643460 2026] [security2:error] [pid 1940612:tid 1940612] [client 84.200.16.110:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlSpN2_qyx-0h__vX2jTgAAAAA"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:37:34.491397 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSrunNlyfrsrZbi4_iigAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:37:34.491456 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSrunNlyfrsrZbi4_iigAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:37:37.095896 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSsRHl2U-jS0ZSEvYFkgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:37:37.095954 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSsRHl2U-jS0ZSEvYFkgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:37:54.621801 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSwsM5vNyyeo5gKbcXBQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:37:54.621920 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlSwsM5vNyyeo5gKbcXBQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:38:14.782383 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:38:17.860627 2026] [security2:error] [pid 1942097:tid 1942097] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-global": Permission denied [hostname "www.mrxdc.com"] [uri "/index.php"] [unique_id "aZlS2IZy3zgfuTKkxEXlkwAAAAs"] [Sat Feb 21 11:38:17.860724 2026] [security2:error] [pid 1942097:tid 1942097] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-ip": Permission denied [hostname "www.mrxdc.com"] [uri "/index.php"] [unique_id "aZlS2IZy3zgfuTKkxEXlkwAAAAs"] [Sat Feb 21 11:38:33.157693 2026] [security2:error] [pid 1946671:tid 1946671] [client 157.173.203.94:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlS3k5JA8ChNvCn9kyM2AAAAAY"] [Sat Feb 21 11:38:33.157757 2026] [security2:error] [pid 1946671:tid 1946671] [client 157.173.203.94:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlS3k5JA8ChNvCn9kyM2AAAAAY"] [Sat Feb 21 11:38:46.812010 2026] [security2:error] [pid 1946671:tid 1946671] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aZlS9k5JA8ChNvCn9kyM5QAAAAY"] [Sat Feb 21 11:38:46.812082 2026] [security2:error] [pid 1946671:tid 1946671] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aZlS9k5JA8ChNvCn9kyM5QAAAAY"] [Sat Feb 21 11:38:55.297311 2026] [security2:error] [pid 1928316:tid 1928316] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/.well-known/content.php"] [unique_id "aZlS_2M-kOlwXmZZvLvcSQAAAAo"] [Sat Feb 21 11:38:55.297404 2026] [security2:error] [pid 1928316:tid 1928316] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/.well-known/content.php"] [unique_id "aZlS_2M-kOlwXmZZvLvcSQAAAAo"] [Sat Feb 21 11:39:03.829898 2026] [security2:error] [pid 1928316:tid 1928316] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-global": Permission denied [hostname "mrxdc.com"] [uri "/index.php"] [unique_id "aZlTB2M-kOlwXmZZvLvcTQAAAAo"] [Sat Feb 21 11:39:03.830043 2026] [security2:error] [pid 1928316:tid 1928316] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-ip": Permission denied [hostname "mrxdc.com"] [uri "/index.php"] [unique_id "aZlTB2M-kOlwXmZZvLvcTQAAAAo"] [Sat Feb 21 11:39:43.443761 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTL17N2x2Af1vETfMojAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:39:43.444048 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTL17N2x2Af1vETfMojAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:39:48.265050 2026] [access_compat:error] [pid 1935147:tid 1935147] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:40:03.375562 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTQ17N2x2Af1vETfMomAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:40:03.375668 2026] [security2:error] [pid 1935147:tid 1935147] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTQ17N2x2Af1vETfMomAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:40:05.054458 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTRGM-kOlwXmZZvLvccAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 11:40:05.054545 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTRGM-kOlwXmZZvLvccAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 11:40:19.172156 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTU2M-kOlwXmZZvLvceAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:40:19.172274 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTU2M-kOlwXmZZvLvceAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 11:40:30.357146 2026] [negotiation:error] [pid 1926602:tid 1926602] [client 40.115.138.121:0] AH00687: Negotiation: discovered file(s) matching request: /home/www247rp/public_html/index (None could be negotiated). [Sat Feb 21 11:40:30.679205 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTXsM5vNyyeo5gKbcXbwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:40:30.679283 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTXsM5vNyyeo5gKbcXbwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:40:58.279833 2026] [security2:error] [pid 1926602:tid 1926602] [client 51.83.5.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlTeBHl2U-jS0ZSEvYGFwAAAAM"] [Sat Feb 21 11:40:58.279895 2026] [security2:error] [pid 1926602:tid 1926602] [client 51.83.5.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlTeBHl2U-jS0ZSEvYGFwAAAAM"] [Sat Feb 21 11:41:01.912120 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTfeDDGnxikc0KxPn4SAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 11:41:01.912268 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTfeDDGnxikc0KxPn4SAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 11:41:16.395942 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:41:17.073417 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTjOnNlyfrsrZbi4_jFwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 11:41:17.073537 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTjOnNlyfrsrZbi4_jFwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 11:41:22.322220 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTkunNlyfrsrZbi4_jGwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:41:22.322295 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTkunNlyfrsrZbi4_jGwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 11:41:47.180723 2026] [cgi:error] [pid 1926783:tid 1926783] [client 4.232.90.25:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden [Sat Feb 21 11:41:47.180906 2026] [cgi:error] [pid 1926783:tid 1926783] [client 4.232.90.25:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157. [Sat Feb 21 11:42:04.338756 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTvIZy3zgfuTKkxEXmIwAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:42:04.338869 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTvIZy3zgfuTKkxEXmIwAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:42:16.637941 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:42:21.744948 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTzd2_qyx-0h__vX2kBAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 11:42:21.745027 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlTzd2_qyx-0h__vX2kBAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 11:42:57.526176 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlT8cM5vNyyeo5gKbcXxQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 11:42:57.526298 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlT8cM5vNyyeo5gKbcXxQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 11:43:19.292186 2026] [access_compat:error] [pid 1946671:tid 1946671] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:43:27.199985 2026] [security2:error] [pid 1928316:tid 1928316] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-global": Permission denied [hostname "www.mrxdc.com"] [uri "/index.php"] [unique_id "aZlUDWM-kOlwXmZZvLvc4AAAAAo"] [Sat Feb 21 11:43:27.200074 2026] [security2:error] [pid 1928316:tid 1928316] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-ip": Permission denied [hostname "www.mrxdc.com"] [uri "/index.php"] [unique_id "aZlUDWM-kOlwXmZZvLvc4AAAAAo"] [Sat Feb 21 11:43:32.537491 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:43:34.946347 2026] [security2:error] [pid 1926783:tid 1926783] [client 192.64.112.17:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlUFcM5vNyyeo5gKbcX2gAAAAc"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:43:34.946410 2026] [security2:error] [pid 1926783:tid 1926783] [client 192.64.112.17:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlUFcM5vNyyeo5gKbcX2gAAAAc"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:43:39.269328 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUG-nNlyfrsrZbi4_jbgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0 [Sat Feb 21 11:43:39.269415 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUG-nNlyfrsrZbi4_jbgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0 [Sat Feb 21 11:44:07.583757 2026] [security2:error] [pid 1942097:tid 1942097] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-global": Permission denied [hostname "www.mrxdc.com"] [uri "/index.php"] [unique_id "aZlUNoZy3zgfuTKkxEXmYwAAAAs"] [Sat Feb 21 11:44:07.584421 2026] [security2:error] [pid 1942097:tid 1942097] [client 20.203.180.135:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-ip": Permission denied [hostname "www.mrxdc.com"] [uri "/index.php"] [unique_id "aZlUNoZy3zgfuTKkxEXmYwAAAAs"] [Sat Feb 21 11:44:21.572550 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlURWM-kOlwXmZZvLvdBQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop7%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem [Sat Feb 21 11:44:21.572674 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlURWM-kOlwXmZZvLvdBQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop7%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem [Sat Feb 21 11:44:28.874760 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUTODDGnxikc0KxPn4wQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:44:28.874922 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUTODDGnxikc0KxPn4wQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:44:42.917789 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:44:49.884495 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUYcM5vNyyeo5gKbcYDwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:44:49.884557 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUYcM5vNyyeo5gKbcYDwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:45:00.635832 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:45:41.052576 2026] [security2:error] [pid 1946671:tid 1946671] [client 165.22.191.226:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-global": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlUk05JA8ChNvCn9kyN0gAAAAY"], referer: http://spotliteworld.com/ [Sat Feb 21 11:45:41.052712 2026] [security2:error] [pid 1946671:tid 1946671] [client 165.22.191.226:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-ip": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlUk05JA8ChNvCn9kyN0gAAAAY"], referer: http://spotliteworld.com/ [Sat Feb 21 11:45:54.206789 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:46:05.150618 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUreDDGnxikc0KxPn49AAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fmq [Sat Feb 21 11:46:05.150719 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUreDDGnxikc0KxPn49AAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fmq [Sat Feb 21 11:46:09.406409 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUsd2_qyx-0h__vX2kgAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem [Sat Feb 21 11:46:09.406494 2026] [security2:error] [pid 1940612:tid 1940612] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUsd2_qyx-0h__vX2kgAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem [Sat Feb 21 11:46:30.449788 2026] [security2:error] [pid 1945361:tid 1945361] [client 50.6.7.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlUxeDDGnxikc0KxPn5AgAAAAI"] [Sat Feb 21 11:46:30.449841 2026] [security2:error] [pid 1945361:tid 1945361] [client 50.6.7.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlUxeDDGnxikc0KxPn5AgAAAAI"] [Sat Feb 21 11:46:32.958573 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUyOnNlyfrsrZbi4_j0gAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:46:32.958648 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlUyOnNlyfrsrZbi4_j0gAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:47:00.243854 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:47:02.905758 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 172.86.92.68:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:47:12.072156 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlU72M-kOlwXmZZvLvdXQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 11:47:12.072295 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlU72M-kOlwXmZZvLvdXQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 11:47:16.085504 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 104.238.30.63:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:47:27.619745 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 117.129.64.28:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:47:28.177235 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVAMM5vNyyeo5gKbcYXgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 11:47:28.177301 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVAMM5vNyyeo5gKbcYXgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 11:47:34.091991 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVBcM5vNyyeo5gKbcYYgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fmq [Sat Feb 21 11:47:34.092090 2026] [security2:error] [pid 1926783:tid 1926783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVBcM5vNyyeo5gKbcYYgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fmq [Sat Feb 21 11:47:47.186139 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVE4Zy3zgfuTKkxEXm2gAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 11:47:47.186224 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVE4Zy3zgfuTKkxEXm2gAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 11:47:50.163812 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVFhHl2U-jS0ZSEvYG_gAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:47:50.163895 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVFhHl2U-jS0ZSEvYG_gAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5 [Sat Feb 21 11:48:04.278199 2026] [access_compat:error] [pid 1926783:tid 1926783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:48:04.979820 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 223.74.60.207:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:13.819964 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 113.67.10.182:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:15.957683 2026] [access_compat:error] [pid 1940612:tid 1940612] [client 98.175.31.195:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:20.873468 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:48:21.070675 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 98.170.57.231:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:24.040758 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVN-nNlyfrsrZbi4_kEAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:48:24.040857 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVN-nNlyfrsrZbi4_kEAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:48:27.271599 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 61.141.174.165:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:28.663669 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVPMtCgl1jApX7wei9wAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:48:28.663729 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVPMtCgl1jApX7wei9wAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:48:29.200823 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 122.159.212.16:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:39.580956 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVR4Zy3zgfuTKkxEXnAAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:48:39.581023 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVR4Zy3zgfuTKkxEXnAAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 11:48:44.546432 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 98.191.0.37:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:48:52.978223 2026] [security2:error] [pid 1960211:tid 1960211] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZlVU-G3t-Rv6h9Y1NW0HQAAAAU"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:48:52.978395 2026] [security2:error] [pid 1960211:tid 1960211] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZlVU-G3t-Rv6h9Y1NW0HQAAAAU"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:48:54.572899 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 106.112.78.248:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:49:00.917582 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:49:06.155814 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:49:12.224578 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 119.120.214.206:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:49:13.151707 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 212.33.248.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:49:19.060621 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 72.207.109.5:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:49:20.621653 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVcIZy3zgfuTKkxEXnGgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:49:20.621751 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVcIZy3zgfuTKkxEXnGgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:49:27.014697 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 98.170.57.241:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:49:37.892185 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVgdLbd4zJn3wkh3dtbQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 11:49:37.892273 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVgdLbd4zJn3wkh3dtbQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 11:49:41.056436 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVhGM-kOlwXmZZvLvdswAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 11:49:41.056521 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVhGM-kOlwXmZZvLvdswAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 11:49:54.824910 2026] [access_compat:error] [pid 1946671:tid 1946671] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:49:56.593824 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:49:58.382869 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:50:00.194554 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:50:03.335345 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVmxHl2U-jS0ZSEvYHUAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:50:03.335440 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVmxHl2U-jS0ZSEvYHUAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:50:06.847027 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:50:08.017609 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:50:08.267935 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:50:08.975538 2026] [security2:error] [pid 1945361:tid 1945361] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlVn-DDGnxikc0KxPn5fwAAAAI"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:50:08.975630 2026] [security2:error] [pid 1945361:tid 1945361] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlVn-DDGnxikc0KxPn5fwAAAAI"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:50:09.174131 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVobQytPl9f6K_EmrAnAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3 [Sat Feb 21 11:50:09.174209 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVobQytPl9f6K_EmrAnAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3 [Sat Feb 21 11:50:13.060850 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:50:15.011027 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:50:17.871333 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:50:19.775433 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:50:21.517579 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:50:30.288487 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVtuG3t-Rv6h9Y1NW0UwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:50:30.288561 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVtuG3t-Rv6h9Y1NW0UwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:50:43.143033 2026] [security2:error] [pid 1960429:tid 1960429] [client 4.188.81.105:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlVweS62LFr1sxUkG_cyQAAAAA"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:50:43.143152 2026] [security2:error] [pid 1960429:tid 1960429] [client 4.188.81.105:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlVweS62LFr1sxUkG_cyQAAAAA"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:50:45.923162 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVxdLbd4zJn3wkh3dtkwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 11:50:45.923260 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVxdLbd4zJn3wkh3dtkwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 11:50:50.239551 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVyunNlyfrsrZbi4_kXQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:50:50.239650 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlVyunNlyfrsrZbi4_kXQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 11:50:53.375961 2026] [security2:error] [pid 1928316:tid 1928316] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlVy2M-kOlwXmZZvLvd1gAAAAo"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:50:53.376019 2026] [security2:error] [pid 1928316:tid 1928316] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlVy2M-kOlwXmZZvLvd1gAAAAo"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:51:08.936367 2026] [security2:error] [pid 1960664:tid 1960664] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlV29Lbd4zJn3wkh3dtnAAAAAc"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:51:08.936464 2026] [security2:error] [pid 1960664:tid 1960664] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlV29Lbd4zJn3wkh3dtnAAAAAc"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:51:10.147949 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:51:15.847659 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:51:18.120581 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:51:20.509238 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:51:22.828631 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:51:25.103540 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 11:51:27.206734 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:51:27.947781 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlV7xHl2U-jS0ZSEvYHfgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 11:51:27.947875 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlV7xHl2U-jS0ZSEvYHfgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 11:51:29.448381 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:51:31.516502 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:51:32.785991 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlV9IZy3zgfuTKkxEXnZAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:51:32.786143 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlV9IZy3zgfuTKkxEXnZAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:51:33.955959 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:51:36.419897 2026] [access_compat:error] [pid 1946671:tid 1946671] [client 67.201.35.145:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 11:51:56.701566 2026] [security2:error] [pid 1960664:tid 1960664] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlWC9Lbd4zJn3wkh3dtvAAAAAc"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:51:56.701685 2026] [security2:error] [pid 1960664:tid 1960664] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlWC9Lbd4zJn3wkh3dtvAAAAAc"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:52:06.771339 2026] [security2:error] [pid 1960429:tid 1960429] [client 138.229.103.195:0] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "serversvalley.com"] [uri "/contact.html"] [unique_id "aZlWFuS62LFr1sxUkG_c_wAAAAA"], referer: http://serversvalley.com/contact.html [Sat Feb 21 11:52:06.771484 2026] [security2:error] [pid 1960429:tid 1960429] [client 138.229.103.195:0] ModSecurity: Warning. Found 1 byte(s) in ARGS:token outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "serversvalley.com"] [uri "/contact.html"] [unique_id "aZlWFuS62LFr1sxUkG_c_wAAAAA"], referer: http://serversvalley.com/contact.html [Sat Feb 21 11:52:13.815485 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWHeS62LFr1sxUkG_dBQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:52:13.815565 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWHeS62LFr1sxUkG_dBQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:52:42.181600 2026] [security2:error] [pid 1946671:tid 1946671] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWOk5JA8ChNvCn9kyOxgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0 [Sat Feb 21 11:52:42.181715 2026] [security2:error] [pid 1946671:tid 1946671] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWOk5JA8ChNvCn9kyOxgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0 [Sat Feb 21 11:52:56.923465 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWSLQytPl9f6K_EmrA-AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:52:56.923583 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWSLQytPl9f6K_EmrA-AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:53:12.648133 2026] [security2:error] [pid 1926602:tid 1926602] [client 193.186.4.139:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlWVRHl2U-jS0ZSEvYHugAAAAM"], referer: https://www.google.com/ [Sat Feb 21 11:53:12.648208 2026] [security2:error] [pid 1926602:tid 1926602] [client 193.186.4.139:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlWVRHl2U-jS0ZSEvYHugAAAAM"], referer: https://www.google.com/ [Sat Feb 21 11:53:12.901750 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:53:32.205508 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 11:53:33.403503 2026] [security2:error] [pid 1960664:tid 1960664] [client 162.240.233.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlWbNLbd4zJn3wkh3dt7AAAAAc"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:53:33.403575 2026] [security2:error] [pid 1960664:tid 1960664] [client 162.240.233.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlWbNLbd4zJn3wkh3dt7AAAAAc"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 11:53:34.539925 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWbmM-kOlwXmZZvLveMQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop6%2Fbdi%2Fpower [Sat Feb 21 11:53:34.540070 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWbmM-kOlwXmZZvLveMQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop6%2Fbdi%2Fpower [Sat Feb 21 11:53:34.909256 2026] [security2:error] [pid 1945361:tid 1945361] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlWbeDDGnxikc0KxPn58gAAAAI"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:53:34.909371 2026] [security2:error] [pid 1945361:tid 1945361] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlWbeDDGnxikc0KxPn58gAAAAI"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:53:48.206176 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWfLQytPl9f6K_EmrBFAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4 [Sat Feb 21 11:53:48.206265 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWfLQytPl9f6K_EmrBFAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4 [Sat Feb 21 11:54:04.523533 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWjGM-kOlwXmZZvLveRAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:54:04.523648 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWjGM-kOlwXmZZvLveRAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 11:54:06.923253 2026] [security2:error] [pid 1950054:tid 1950054] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZlWjctCgl1jApX7wei-gQAAAAg"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:54:06.923362 2026] [security2:error] [pid 1950054:tid 1950054] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZlWjctCgl1jApX7wei-gQAAAAg"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 11:54:12.673021 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWlNLbd4zJn3wkh3duAQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:54:12.673121 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWlNLbd4zJn3wkh3duAQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 11:54:15.962700 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWl2M-kOlwXmZZvLveSgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:54:15.962774 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWl2M-kOlwXmZZvLveSgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:54:19.083432 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:54:48.391321 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWuOG3t-Rv6h9Y1NW06gAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 11:54:48.391445 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlWuOG3t-Rv6h9Y1NW06gAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 11:55:34.692438 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW5uG3t-Rv6h9Y1NW1AwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 11:55:34.692580 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW5uG3t-Rv6h9Y1NW1AwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 11:55:34.746586 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW5uDDGnxikc0KxPn6MgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 11:55:34.746648 2026] [security2:error] [pid 1945361:tid 1945361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW5uDDGnxikc0KxPn6MgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 11:55:48.762372 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW9MtCgl1jApX7wei-uQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 11:55:48.762505 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW9MtCgl1jApX7wei-uQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 11:55:54.246047 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:55:58.091090 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.82.47.5:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.git/config"] [unique_id "aZlW_hHl2U-jS0ZSEvYIFgAAAAM"] [Sat Feb 21 11:55:58.791499 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW_stCgl1jApX7wei-vgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:55:58.791594 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlW_stCgl1jApX7wei-vgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:56:07.772184 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXB-G3t-Rv6h9Y1NW1EwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop2 [Sat Feb 21 11:56:07.772272 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXB-G3t-Rv6h9Y1NW1EwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop2 [Sat Feb 21 11:56:24.594087 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXGLQytPl9f6K_EmrBZQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:56:24.594177 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXGLQytPl9f6K_EmrBZQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 11:57:05.434699 2026] [proxy_fcgi:error] [pid 1950054:tid 1950054] [client 20.111.62.157:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 11:57:05.459641 2026] [proxy_fcgi:error] [pid 1942097:tid 1942097] [client 20.111.62.157:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 11:57:05.483806 2026] [proxy_fcgi:error] [pid 1960664:tid 1960664] [client 20.111.62.157:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 11:57:11.156782 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:57:17.167703 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXTdLbd4zJn3wkh3duXAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:57:17.167811 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXTdLbd4zJn3wkh3duXAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 11:57:22.415832 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 111.40.99.97:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:57:39.062768 2026] [authz_core:error] [pid 1956767:tid 1956767] [client 20.78.169.245:0] AH01630: client denied by server configuration: /home/usmlittmann/public_html/wp-includes/error_log [Sat Feb 21 11:57:43.579599 2026] [cgi:error] [pid 1960211:tid 1960211] [client 20.78.169.245:0] AH02812: stderr from /home/usmlittmann/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 11:57:53.791443 2026] [authz_core:error] [pid 1926602:tid 1926602] [client 20.78.169.245:0] AH01630: client denied by server configuration: /home/usmlittmann/public_html/wp-includes/html-api/error_log [Sat Feb 21 11:58:00.666333 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 20.78.169.245:0] AH01797: client denied by server configuration: /home/usmlittmann/public_html/wp-content/uploads/ai-builder/ [Sat Feb 21 11:58:00.668656 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 20.78.169.245:0] AH01797: client denied by server configuration: /home/usmlittmann/public_html/wp-content/uploads/wc-logs/ [Sat Feb 21 11:58:00.669184 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 20.78.169.245:0] AH01797: client denied by server configuration: /home/usmlittmann/public_html/wp-content/uploads/astra-sites/ [Sat Feb 21 11:58:00.676247 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 20.78.169.245:0] AH01797: client denied by server configuration: /home/usmlittmann/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 11:58:02.149738 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 111.18.14.163:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:58:05.436163 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 20.78.169.245:0] AH01630: client denied by server configuration: /home/usmlittmann/public_html/wp-includes/PHPMailer/error_log [Sat Feb 21 11:58:07.637171 2026] [security2:error] [pid 1960429:tid 1960429] [client 40.115.138.121:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-global": Permission denied [hostname "curvedconnections.com"] [uri "/404.shtml"] [unique_id "aZlXf-S62LFr1sxUkG_dvQAAAAA"] [Sat Feb 21 11:58:07.637314 2026] [security2:error] [pid 1960429:tid 1960429] [client 40.115.138.121:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-ip": Permission denied [hostname "curvedconnections.com"] [uri "/404.shtml"] [unique_id "aZlXf-S62LFr1sxUkG_dvQAAAAA"] [Sat Feb 21 11:58:12.899206 2026] [cgi:error] [pid 1942097:tid 1942097] [client 40.115.138.121:0] AH02812: stderr from /home/curvedcon/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 11:58:14.226483 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:58:14.919727 2026] [security2:error] [pid 1942097:tid 1942097] [client 69.49.112.70:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlXhYZy3zgfuTKkxEXoPQAAAAs"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:58:14.919806 2026] [security2:error] [pid 1942097:tid 1942097] [client 69.49.112.70:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlXhYZy3zgfuTKkxEXoPQAAAAs"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 11:58:20.796085 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 113.25.171.31:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:58:21.843228 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 222.76.107.189:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:58:24.797105 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXkOG3t-Rv6h9Y1NW1WgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:58:24.797189 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXkOG3t-Rv6h9Y1NW1WgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 11:58:31.130140 2026] [security2:error] [pid 1945361:tid 1945361] [client 185.93.89.136:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "akcpa.onebox.pk"] [uri "/.env"] [unique_id "aZlXl-DDGnxikc0KxPn6jgAAAAI"] [Sat Feb 21 11:58:31.131949 2026] [core:error] [pid 1945361:tid 1945361] [client 185.93.89.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:58:31.131991 2026] [core:error] [pid 1945361:tid 1945361] [client 185.93.89.136:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 11:58:50.389264 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 120.239.119.223:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:58:59.274067 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXs9Lbd4zJn3wkh3dukwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:58:59.274158 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXs9Lbd4zJn3wkh3dukwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 11:59:00.682768 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 111.174.21.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:59:09.540412 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 27.45.77.159:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:59:13.678121 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXwWM-kOlwXmZZvLve6gAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:59:13.678250 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlXwWM-kOlwXmZZvLve6gAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 11:59:28.519681 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 186.137.21.165:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:59:29.760961 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 11:59:30.194021 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 111.58.249.168:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:59:47.171452 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 42.180.148.244:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 11:59:51.644957 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlX52M-kOlwXmZZvLve_gAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:59:51.645057 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlX52M-kOlwXmZZvLve_gAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 11:59:54.147427 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 222.170.114.192:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:00:14.959793 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 72.56.59.56:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:00:30.505314 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:00:31.335828 2026] [security2:error] [pid 1949603:tid 1949603] [client 20.111.62.157:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-global": Permission denied [hostname "demo.redpenguinit.com"] [uri "/ioxi-o.php"] [unique_id "aZlYD-nNlyfrsrZbi4_ljAAAAAQ"] [Sat Feb 21 12:00:31.335901 2026] [security2:error] [pid 1949603:tid 1949603] [client 20.111.62.157:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-ip": Permission denied [hostname "demo.redpenguinit.com"] [uri "/ioxi-o.php"] [unique_id "aZlYD-nNlyfrsrZbi4_ljAAAAAQ"] [Sat Feb 21 12:00:36.909046 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:00:39.946952 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:00:40.323274 2026] [security2:error] [pid 1960429:tid 1960429] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlYGOS62LFr1sxUkG_eIAAAAAA"] [Sat Feb 21 12:00:40.323324 2026] [security2:error] [pid 1960429:tid 1960429] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlYGOS62LFr1sxUkG_eIAAAAAA"] [Sat Feb 21 12:00:43.047180 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:00:45.550526 2026] [access_compat:error] [pid 1945361:tid 1945361] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:00:48.068626 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:00:50.705615 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:00:52.125033 2026] [authz_core:error] [pid 1960429:tid 1960429] [client 40.115.138.121:0] AH01630: client denied by server configuration: /home/serversvalley/public_html/blog/wp-includes/error_log [Sat Feb 21 12:00:52.676744 2026] [security2:error] [pid 1950054:tid 1950054] [client 34.74.242.206:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-global": Permission denied [hostname "curvedconnections.com"] [uri "/404.shtml"] [unique_id "aZlYJMtCgl1jApX7wei_YwAAAAg"] [Sat Feb 21 12:00:52.676830 2026] [security2:error] [pid 1950054:tid 1950054] [client 34.74.242.206:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-ip": Permission denied [hostname "curvedconnections.com"] [uri "/404.shtml"] [unique_id "aZlYJMtCgl1jApX7wei_YwAAAAg"] [Sat Feb 21 12:00:53.281833 2026] [cgi:error] [pid 1928316:tid 1928316] [client 40.115.138.121:0] AH02812: stderr from /home/serversvalley/public_html/blog/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 12:00:53.506072 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:00:55.945239 2026] [security2:error] [pid 1942097:tid 1942097] [client 40.115.138.121:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "blog.serversvalley.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aZlYJ4Zy3zgfuTKkxEXopAAAAAs"] [Sat Feb 21 12:00:55.945318 2026] [security2:error] [pid 1942097:tid 1942097] [client 40.115.138.121:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "blog.serversvalley.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aZlYJ4Zy3zgfuTKkxEXopAAAAAs"] [Sat Feb 21 12:00:55.948890 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:00:58.112278 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:00:59.557423 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:01:00.484811 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 72.195.101.99:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:01:02.011477 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:01:04.267410 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:01:09.232986 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYNbQytPl9f6K_EmrCDgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:01:09.233044 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYNbQytPl9f6K_EmrCDgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:01:10.172514 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:01:12.404454 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:01:12.883859 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYOLzLGJ4Gu6sWT2ETmAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:01:12.884187 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYOLzLGJ4Gu6sWT2ETmAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:01:13.431075 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYOenNlyfrsrZbi4_lrAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 12:01:13.431156 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYOenNlyfrsrZbi4_lrAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 12:01:13.694565 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:01:14.513473 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:01:16.617700 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:01:19.177823 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:01:21.358157 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:01:23.526090 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 206.206.126.140:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:01:23.548768 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYQ-nNlyfrsrZbi4_lsQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 12:01:23.548834 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYQ-nNlyfrsrZbi4_lsQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 12:01:28.103335 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/02/index.php, referer: binance.com [Sat Feb 21 12:01:28.103629 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/02/index.php5, referer: binance.com [Sat Feb 21 12:01:28.104059 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/02/index.phtml, referer: binance.com [Sat Feb 21 12:01:42.819893 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/01/index.php, referer: binance.com [Sat Feb 21 12:01:42.820222 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/01/index.php5, referer: binance.com [Sat Feb 21 12:01:42.820810 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/01/index.phtml, referer: binance.com [Sat Feb 21 12:01:44.510291 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYWMtCgl1jApX7wei_fAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:01:44.510427 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYWMtCgl1jApX7wei_fAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:01:45.581627 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYWeS62LFr1sxUkG_eRQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:01:45.581811 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYWeS62LFr1sxUkG_eRQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:01:47.226009 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYW2M-kOlwXmZZvLvfSwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 12:01:47.226157 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYW2M-kOlwXmZZvLvfSwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 12:01:47.464019 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/index.php, referer: binance.com [Sat Feb 21 12:01:47.464294 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/index.php5, referer: binance.com [Sat Feb 21 12:01:47.465062 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/index.phtml, referer: binance.com [Sat Feb 21 12:01:55.701797 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:02:01.389691 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/upgrade/index.php, referer: binance.com [Sat Feb 21 12:02:01.390077 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/upgrade/index.php5, referer: binance.com [Sat Feb 21 12:02:01.390654 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/upgrade/index.phtml, referer: binance.com [Sat Feb 21 12:02:06.841554 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/languages/index.php5, referer: binance.com [Sat Feb 21 12:02:06.842397 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/languages/index.phtml, referer: binance.com [Sat Feb 21 12:02:16.494289 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYeGM-kOlwXmZZvLvfWAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:02:16.494402 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYeGM-kOlwXmZZvLvfWAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:02:19.739455 2026] [authz_core:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 12:02:19.741908 2026] [security2:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/wp-admin/includes/"] [unique_id "aZlYe8tCgl1jApX7wei_jAAAAAg"], referer: binance.com [Sat Feb 21 12:02:19.741959 2026] [security2:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/wp-admin/includes/"] [unique_id "aZlYe8tCgl1jApX7wei_jAAAAAg"], referer: binance.com [Sat Feb 21 12:02:37.726408 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 111.8.159.125:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:02:52.183907 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYnMtCgl1jApX7wei_nQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 12:02:52.183991 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYnMtCgl1jApX7wei_nQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 12:02:56.316205 2026] [security2:error] [pid 1967762:tid 1967762] [client 20.100.195.34:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "www.social.247reactionpower.com"] [uri "/ms-edit.php"] [unique_id "aZlYoLzLGJ4Gu6sWT2ETyAAAAAY"] [Sat Feb 21 12:02:56.316314 2026] [security2:error] [pid 1967762:tid 1967762] [client 20.100.195.34:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "www.social.247reactionpower.com"] [uri "/ms-edit.php"] [unique_id "aZlYoLzLGJ4Gu6sWT2ETyAAAAAY"] [Sat Feb 21 12:02:58.842746 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 103.84.95.54:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:03:00.175641 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:03:02.361404 2026] [security2:error] [pid 1960211:tid 1960211] [client 20.100.195.34:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "www.social.247reactionpower.com"] [uri "/f5.php"] [unique_id "aZlYpuG3t-Rv6h9Y1NW1-AAAAAU"] [Sat Feb 21 12:03:02.361670 2026] [security2:error] [pid 1960211:tid 1960211] [client 20.100.195.34:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "www.social.247reactionpower.com"] [uri "/f5.php"] [unique_id "aZlYpuG3t-Rv6h9Y1NW1-AAAAAU"] [Sat Feb 21 12:03:31.295289 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYw7zLGJ4Gu6sWT2ET6QAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:03:31.295349 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlYw7zLGJ4Gu6sWT2ET6QAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:03:47.101239 2026] [security2:error] [pid 1928316:tid 1928316] [client 72.167.150.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlY0mM-kOlwXmZZvLvfmwAAAAo"] [Sat Feb 21 12:03:47.101305 2026] [security2:error] [pid 1928316:tid 1928316] [client 72.167.150.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlY0mM-kOlwXmZZvLvfmwAAAAo"] [Sat Feb 21 12:03:52.980555 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 185.209.29.226:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:03:58.253640 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlY3hHl2U-jS0ZSEvYJNQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 12:03:58.253746 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlY3hHl2U-jS0ZSEvYJNQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 12:04:07.235422 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:04:28.082439 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlY-8tCgl1jApX7wei_7QAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:04:28.082612 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlY-8tCgl1jApX7wei_7QAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:04:34.020990 2026] [security2:error] [pid 1967762:tid 1967762] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZlZArzLGJ4Gu6sWT2EUIgAAAAY"] [Sat Feb 21 12:04:34.021108 2026] [security2:error] [pid 1967762:tid 1967762] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZlZArzLGJ4Gu6sWT2EUIgAAAAY"] [Sat Feb 21 12:04:36.307873 2026] [authz_core:error] [pid 1942097:tid 1942097] [client 62.171.170.202:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 12:04:55.532286 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZF7zLGJ4Gu6sWT2EUNAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:04:55.532432 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZF7zLGJ4Gu6sWT2EUNAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:05:20.726167 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:05:21.437991 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:05:26.326974 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:05:28.382729 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:05:33.655622 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:05:34.428543 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZPmM-kOlwXmZZvLvf8AAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem [Sat Feb 21 12:05:34.428613 2026] [security2:error] [pid 1928316:tid 1928316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZPmM-kOlwXmZZvLvf8AAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem [Sat Feb 21 12:05:38.834116 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:05:41.025632 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:05:43.187764 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:05:45.313366 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:05:47.595217 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:05:49.739646 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:05:51.768514 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 23.19.231.152:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:06:24.996944 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZcLQytPl9f6K_EmrC2QAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:06:24.997106 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZcLQytPl9f6K_EmrC2QAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:06:45.225385 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZhdLbd4zJn3wkh3dvwgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0 [Sat Feb 21 12:06:45.225465 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZhdLbd4zJn3wkh3dvwgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0 [Sat Feb 21 12:06:55.939259 2026] [access_compat:error] [pid 1928316:tid 1928316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:07:00.522907 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZlLQytPl9f6K_EmrC6gAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 12:07:00.523013 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZlLQytPl9f6K_EmrC6gAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 12:07:02.028202 2026] [security2:error] [pid 1960211:tid 1960211] [client 62.171.170.202:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/wp-includes/class-wp-navigation-fallback.php"] [unique_id "aZlZleG3t-Rv6h9Y1NW2jwAAAAU"], referer: binance.com [Sat Feb 21 12:07:02.028285 2026] [security2:error] [pid 1960211:tid 1960211] [client 62.171.170.202:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/wp-includes/class-wp-navigation-fallback.php"] [unique_id "aZlZleG3t-Rv6h9Y1NW2jwAAAAU"], referer: binance.com [Sat Feb 21 12:07:21.188847 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZqYZy3zgfuTKkxEXpiAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:07:21.188947 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZqYZy3zgfuTKkxEXpiAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:07:40.950583 2026] [security2:error] [pid 1956767:tid 1956767] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlZvLQytPl9f6K_EmrC_AAAAAE"] [Sat Feb 21 12:07:40.950708 2026] [security2:error] [pid 1956767:tid 1956767] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlZvLQytPl9f6K_EmrC_AAAAAE"] [Sat Feb 21 12:07:53.820837 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZyeG3t-Rv6h9Y1NW2pwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6 [Sat Feb 21 12:07:53.820946 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZyeG3t-Rv6h9Y1NW2pwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6 [Sat Feb 21 12:07:58.828621 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:08:12.546282 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ3BHl2U-jS0ZSEvYJxgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 12:08:12.546460 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ3BHl2U-jS0ZSEvYJxgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 12:08:16.833485 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ4NLbd4zJn3wkh3dv7wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 12:08:16.833562 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ4NLbd4zJn3wkh3dv7wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 12:08:24.172167 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ6BHl2U-jS0ZSEvYJzAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 12:08:24.172314 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ6BHl2U-jS0ZSEvYJzAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 12:08:34.660377 2026] [autoindex:error] [pid 1942097:tid 1942097] [client 217.154.234.180:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sat Feb 21 12:08:39.449143 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ9-G3t-Rv6h9Y1NW2wAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:08:39.449296 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlZ9-G3t-Rv6h9Y1NW2wAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:08:57.502097 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaCbQytPl9f6K_EmrDIAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:08:57.502269 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaCbQytPl9f6K_EmrDIAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:09:00.493709 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:09:11.945761 2026] [authz_core:error] [pid 1960211:tid 1960211] [client 62.171.170.202:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 12:09:54.090627 2026] [security2:error] [pid 1956767:tid 1956767] [client 114.119.138.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlaQLQytPl9f6K_EmrDPgAAAAE"], referer: https://asalinnovations.com/category/omegle-migliori-siti-di-incontri-gratis-2 [Sat Feb 21 12:09:54.090701 2026] [security2:error] [pid 1956767:tid 1956767] [client 114.119.138.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlaQLQytPl9f6K_EmrDPgAAAAE"], referer: https://asalinnovations.com/category/omegle-migliori-siti-di-incontri-gratis-2 [Sat Feb 21 12:10:09.018201 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaUOG3t-Rv6h9Y1NW27wAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:10:09.018283 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaUOG3t-Rv6h9Y1NW27wAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:10:19.670711 2026] [authz_core:error] [pid 1950054:tid 1950054] [client 62.171.170.202:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 12:10:34.168847 2026] [authz_core:error] [pid 1926602:tid 1926602] [client 62.171.170.202:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 12:10:49.315769 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:10:50.601819 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 18.117.157.27:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/ [Sat Feb 21 12:10:53.704141 2026] [security2:error] [pid 1960211:tid 1960211] [client 18.117.157.27:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/wp-content/plugins/havnor-core/assets/main.js"] [unique_id "aZlafeG3t-Rv6h9Y1NW3DgAAAAU"], referer: https://protectmybills.uk/ [Sat Feb 21 12:10:53.704190 2026] [security2:error] [pid 1960211:tid 1960211] [client 18.117.157.27:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/wp-content/plugins/havnor-core/assets/main.js"] [unique_id "aZlafeG3t-Rv6h9Y1NW3DgAAAAU"], referer: https://protectmybills.uk/ [Sat Feb 21 12:10:57.749516 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 18.117.157.27:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/contact-us/ [Sat Feb 21 12:11:06.609186 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 18.117.157.27:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/about-us/ [Sat Feb 21 12:11:29.990962 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaoRHl2U-jS0ZSEvYKNwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 12:11:29.991210 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaoRHl2U-jS0ZSEvYKNwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 12:11:39.936493 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:12:03.648402 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaw7QytPl9f6K_EmrDhwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:12:03.648535 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlaw7QytPl9f6K_EmrDhwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:12:09.084971 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlayLQytPl9f6K_EmrDiQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 12:12:09.085099 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlayLQytPl9f6K_EmrDiQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 12:12:11.701070 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php, referer: binance.com [Sat Feb 21 12:12:11.701148 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php8, referer: binance.com [Sat Feb 21 12:12:11.701181 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php7, referer: binance.com [Sat Feb 21 12:12:11.701286 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php5, referer: binance.com [Sat Feb 21 12:12:11.701902 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 62.171.170.202:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.phtml, referer: binance.com [Sat Feb 21 12:12:19.679151 2026] [cgi:error] [pid 1949603:tid 1949603] [client 162.142.125.34:0] AH02812: stderr from /home/mastercommnet/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://mastercomm.net.pk:443/cgi-bin [Sat Feb 21 12:12:42.226059 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.154.36.120:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZla6enNlyfrsrZbi4_nNwAAAAQ"] [Sat Feb 21 12:12:42.226165 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.154.36.120:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZla6enNlyfrsrZbi4_nNwAAAAQ"] [Sat Feb 21 12:12:43.815371 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZla6_I7pYZdbjVPhUBW1AAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:12:43.815492 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZla6_I7pYZdbjVPhUBW1AAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:12:45.859780 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:12:46.120720 2026] [security2:error] [pid 1972530:tid 1972530] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZla7vI7pYZdbjVPhUBW1gAAAAI"] [Sat Feb 21 12:12:46.120791 2026] [security2:error] [pid 1972530:tid 1972530] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZla7vI7pYZdbjVPhUBW1gAAAAI"] [Sat Feb 21 12:13:36.841921 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbILQytPl9f6K_EmrDsAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric [Sat Feb 21 12:13:36.842091 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbILQytPl9f6K_EmrDsAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric [Sat Feb 21 12:13:40.749344 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbJOG3t-Rv6h9Y1NW3XwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 12:13:40.749444 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbJOG3t-Rv6h9Y1NW3XwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 12:13:43.081012 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbJunNlyfrsrZbi4_nVAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 12:13:43.081102 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbJunNlyfrsrZbi4_nVAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 12:14:09.074411 2026] [security2:error] [pid 1960429:tid 1960429] [client 40.77.167.32:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZlbQeS62LFr1sxUkG_f5AAAAAA"] [Sat Feb 21 12:14:09.845782 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:14:16.168239 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbSPI7pYZdbjVPhUBW_wAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 12:14:16.168357 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbSPI7pYZdbjVPhUBW_wAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 12:14:31.630796 2026] [security2:error] [pid 1972530:tid 1972530] [client 40.77.167.132:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZlbV_I7pYZdbjVPhUBXBgAAAAI"] [Sat Feb 21 12:14:56.140504 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbcIZy3zgfuTKkxEXqZAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:14:56.140624 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbcIZy3zgfuTKkxEXqZAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:15:12.599003 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:15:27.253600 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbj-G3t-Rv6h9Y1NW3lgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 12:15:27.253672 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbj-G3t-Rv6h9Y1NW3lgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 12:15:32.419195 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlblPI7pYZdbjVPhUBXJQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:15:32.419314 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlblPI7pYZdbjVPhUBXJQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:15:41.926303 2026] [security2:error] [pid 1960211:tid 1960211] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medicalvalley-global": Permission denied [hostname "medicalvalley.pk"] [uri "/re.php"] [unique_id "aZlbneG3t-Rv6h9Y1NW3pQAAAAU"] [Sat Feb 21 12:15:41.926362 2026] [security2:error] [pid 1960211:tid 1960211] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medicalvalley-ip": Permission denied [hostname "medicalvalley.pk"] [uri "/re.php"] [unique_id "aZlbneG3t-Rv6h9Y1NW3pQAAAAU"] [Sat Feb 21 12:15:43.399845 2026] [security2:error] [pid 1960211:tid 1960211] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medicalvalley-global": Permission denied [hostname "medicalvalley.pk"] [uri "/wp-update.php"] [unique_id "aZlbn-G3t-Rv6h9Y1NW3qQAAAAU"] [Sat Feb 21 12:15:43.399927 2026] [security2:error] [pid 1960211:tid 1960211] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medicalvalley-ip": Permission denied [hostname "medicalvalley.pk"] [uri "/wp-update.php"] [unique_id "aZlbn-G3t-Rv6h9Y1NW3qQAAAAU"] [Sat Feb 21 12:15:50.668406 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medicalvalley-global": Permission denied [hostname "medicalvalley.pk"] [uri "/main.php"] [unique_id "aZlbpunNlyfrsrZbi4_noQAAAAQ"] [Sat Feb 21 12:15:50.668490 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medicalvalley-ip": Permission denied [hostname "medicalvalley.pk"] [uri "/main.php"] [unique_id "aZlbpunNlyfrsrZbi4_noQAAAAQ"] [Sat Feb 21 12:16:10.061503 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbuctCgl1jApX7wejBfAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 12:16:10.061625 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbuctCgl1jApX7wejBfAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 12:16:16.668078 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbwIZy3zgfuTKkxEXqowAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi [Sat Feb 21 12:16:16.668171 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlbwIZy3zgfuTKkxEXqowAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi [Sat Feb 21 12:16:17.906822 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:16:27.627238 2026] [security2:error] [pid 1956767:tid 1956767] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.git/config"] [unique_id "aZlby7QytPl9f6K_EmrEGQAAAAE"], referer: http://des-pvt.com/ [Sat Feb 21 12:16:27.770410 2026] [security2:error] [pid 1960211:tid 1960211] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.env"] [unique_id "aZlby-G3t-Rv6h9Y1NW3xgAAAAU"], referer: http://des-pvt.com/ [Sat Feb 21 12:16:31.267514 2026] [security2:error] [pid 1975234:tid 1975234] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/wp-config.php"] [unique_id "aZlbz1aBXcu-sdgPWOyQ6gAAAAk"], referer: http://des-pvt.com/ [Sat Feb 21 12:16:32.687573 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:16:35.592829 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlb0-nNlyfrsrZbi4_nugAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 12:16:35.592897 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlb0-nNlyfrsrZbi4_nugAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 12:16:50.786078 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlb4uG3t-Rv6h9Y1NW30QAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 12:16:50.786204 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlb4uG3t-Rv6h9Y1NW30QAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 12:16:50.998344 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.248.96.218:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlb4vI7pYZdbjVPhUBXUQAAAAI"] [Sat Feb 21 12:16:50.998404 2026] [security2:error] [pid 1972530:tid 1972530] [client 74.248.96.218:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlb4vI7pYZdbjVPhUBXUQAAAAI"] [Sat Feb 21 12:17:08.725683 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:17:10.409999 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlb9uS62LFr1sxUkG_gTwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:17:10.410098 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlb9uS62LFr1sxUkG_gTwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:17:19.844701 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:17:21.248056 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 51.75.151.149:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-api-post.php [Sat Feb 21 12:17:24.810221 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcBBHl2U-jS0ZSEvYK9gAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:17:24.810292 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcBBHl2U-jS0ZSEvYK9gAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:17:57.962834 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcJVd6fqP3Bq8xHbOKWQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:17:57.962998 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcJVd6fqP3Bq8xHbOKWQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:18:49.937003 2026] [security2:error] [pid 1960211:tid 1960211] [client 58.185.12.158:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlcWOG3t-Rv6h9Y1NW4CwAAAAU"] [Sat Feb 21 12:18:49.937075 2026] [security2:error] [pid 1960211:tid 1960211] [client 58.185.12.158:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlcWOG3t-Rv6h9Y1NW4CwAAAAU"] [Sat Feb 21 12:19:05.593916 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:19:15.312484 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcc7zLGJ4Gu6sWT2EV5wAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 12:19:15.312570 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcc7zLGJ4Gu6sWT2EV5wAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 12:19:39.718290 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlci1d6fqP3Bq8xHbOKiAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:19:39.718357 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlci1d6fqP3Bq8xHbOKiAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:19:42.907525 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcjunNlyfrsrZbi4_oFAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 12:19:42.907615 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcjunNlyfrsrZbi4_oFAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 12:19:53.902372 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcmctCgl1jApX7wejB6AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fsubsystem [Sat Feb 21 12:19:53.902478 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcmctCgl1jApX7wejB6AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fsubsystem [Sat Feb 21 12:19:55.480429 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcm7zLGJ4Gu6sWT2EV-AAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 12:19:55.480486 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlcm7zLGJ4Gu6sWT2EV-AAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 12:20:08.691726 2026] [security2:error] [pid 1960664:tid 1960664] [client 88.17.27.40:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/uploads/elementor/thumbs/35-pq8pdjrwnu6qt1kh2rebnzl2adxh30k2ewdvlzi9r0.webp"] [unique_id "aZlcqNLbd4zJn3wkh3dxdQAAAAc"], referer: https://asalinnovations.com/ [Sat Feb 21 12:20:08.691810 2026] [security2:error] [pid 1960664:tid 1960664] [client 88.17.27.40:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/uploads/elementor/thumbs/35-pq8pdjrwnu6qt1kh2rebnzl2adxh30k2ewdvlzi9r0.webp"] [unique_id "aZlcqNLbd4zJn3wkh3dxdQAAAAc"], referer: https://asalinnovations.com/ [Sat Feb 21 12:20:08.892578 2026] [security2:error] [pid 1942097:tid 1942097] [client 88.17.27.40:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/uploads/2024/05/executiveRetreats-1024x693.jpg"] [unique_id "aZlcqIZy3zgfuTKkxEXrGgAAAAs"], referer: https://asalinnovations.com/ [Sat Feb 21 12:20:08.892647 2026] [security2:error] [pid 1942097:tid 1942097] [client 88.17.27.40:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/uploads/2024/05/executiveRetreats-1024x693.jpg"] [unique_id "aZlcqIZy3zgfuTKkxEXrGgAAAAs"], referer: https://asalinnovations.com/ [Sat Feb 21 12:20:11.892907 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:21:06.595675 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlc4hHl2U-jS0ZSEvYLZgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:21:06.595787 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlc4hHl2U-jS0ZSEvYLZgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:21:18.951815 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlc7ld6fqP3Bq8xHbOKuwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:21:18.951919 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlc7ld6fqP3Bq8xHbOKuwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:21:33.648928 2026] [security2:error] [pid 1942097:tid 1942097] [client 216.73.216.158:0] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "353"] [id "920330"] [rev "1"] [msg "Empty User Agent Header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EMPTY_HEADER_UA"] [hostname "master-comm.net"] [uri "/robots.txt"] [unique_id "aZlc_YZy3zgfuTKkxEXrQAAAAAs"] [Sat Feb 21 12:21:33.768224 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 216.73.216.158:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 12:21:33.768609 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 216.73.216.158:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 12:21:33.769326 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 216.73.216.158:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 12:21:51.189174 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:22:07.695011 2026] [security2:error] [pid 1960211:tid 1960211] [client 198.20.177.178:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZldHuG3t-Rv6h9Y1NW4bAAAAAU"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 12:22:07.695073 2026] [security2:error] [pid 1960211:tid 1960211] [client 198.20.177.178:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZldHuG3t-Rv6h9Y1NW4bAAAAAU"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 12:22:53.354017 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:22:57.131545 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldUYZy3zgfuTKkxEXrZgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:22:57.131615 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldUYZy3zgfuTKkxEXrZgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:23:03.088210 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 180.127.179.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:23:07.947537 2026] [security2:error] [pid 1960429:tid 1960429] [client 69.49.112.65:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZldWuS62LFr1sxUkG_hAQAAAAA"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 12:23:07.947636 2026] [security2:error] [pid 1960429:tid 1960429] [client 69.49.112.65:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZldWuS62LFr1sxUkG_hAQAAAAA"], referer: https://surfoye.com/wp-login.php [Sat Feb 21 12:23:25.341273 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 120.229.212.128:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:23:27.812751 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldb-nNlyfrsrZbi4_ogAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 12:23:27.812868 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldb-nNlyfrsrZbi4_ogAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 12:23:28.482106 2026] [cgi:error] [pid 1967762:tid 1967762] [client 167.94.138.191:0] AH02812: stderr from /home/mastercommnet/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://mastercomm.net.pk:443/cgi-bin [Sat Feb 21 12:23:39.395698 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldexHl2U-jS0ZSEvYLrAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:23:39.395798 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldexHl2U-jS0ZSEvYLrAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:23:42.368831 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 72.195.114.184:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:23:53.939818 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:23:58.304031 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldjoZy3zgfuTKkxEXrgAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 12:23:58.304154 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldjoZy3zgfuTKkxEXrgAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 12:24:03.007450 2026] [security2:error] [pid 1960429:tid 1960429] [client 114.119.157.195:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within REQUEST_COOKIES:rfqtk_wp_session_a26785922b3516fe627bab9726c66e43: d82a72d367796c9fa675a11952a123ef||1774250640||1774358640"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "spotliteworld.com"] [uri "/product/darco/"] [unique_id "aZldk-S62LFr1sxUkG_hGwAAAAA"], referer: https://spotliteworld.com/product/darco [Sat Feb 21 12:24:04.598935 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 183.197.160.91:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:24:10.340055 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldmstCgl1jApX7wejCYAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:24:10.340155 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldmstCgl1jApX7wejCYAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:24:11.926773 2026] [security2:error] [pid 1960429:tid 1960429] [client 142.93.84.33:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZldm-S62LFr1sxUkG_hHgAAAAA"] [Sat Feb 21 12:24:11.926835 2026] [security2:error] [pid 1960429:tid 1960429] [client 142.93.84.33:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZldm-S62LFr1sxUkG_hHgAAAAA"] [Sat Feb 21 12:24:24.091857 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 47.128.39.230:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/ [Sat Feb 21 12:24:24.238191 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 46.150.102.26:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:24:54.000689 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:25:03.052901 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldzuG3t-Rv6h9Y1NW4vwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:25:03.053029 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZldzuG3t-Rv6h9Y1NW4vwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:25:16.207621 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZld3MtCgl1jApX7wejCgAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:25:16.207714 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZld3MtCgl1jApX7wejCgAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:25:17.733114 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 101.18.18.6:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:25:37.491150 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:25:44.967833 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:25:53.431056 2026] [proxy_fcgi:error] [pid 1942097:tid 1942097] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.446716 2026] [proxy_fcgi:error] [pid 1926602:tid 1926602] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.462062 2026] [proxy_fcgi:error] [pid 1960211:tid 1960211] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.476803 2026] [proxy_fcgi:error] [pid 1960429:tid 1960429] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.491305 2026] [proxy_fcgi:error] [pid 1960664:tid 1960664] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.504968 2026] [proxy_fcgi:error] [pid 1956767:tid 1956767] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.519265 2026] [proxy_fcgi:error] [pid 1967762:tid 1967762] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.534116 2026] [proxy_fcgi:error] [pid 1949603:tid 1949603] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.549341 2026] [proxy_fcgi:error] [pid 1975250:tid 1975250] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.564612 2026] [proxy_fcgi:error] [pid 1942097:tid 1942097] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.578840 2026] [proxy_fcgi:error] [pid 1926602:tid 1926602] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.592914 2026] [proxy_fcgi:error] [pid 1960211:tid 1960211] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:53.607384 2026] [proxy_fcgi:error] [pid 1950054:tid 1950054] [client 20.203.136.132:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 12:25:59.195745 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:26:00.673041 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:26:05.066949 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleDLzLGJ4Gu6sWT2EWqwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:26:05.067036 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleDLzLGJ4Gu6sWT2EWqwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:26:05.696131 2026] [security2:error] [pid 1960211:tid 1960211] [client 178.16.52.111:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-global": Permission denied [hostname "medimage.com.pk"] [uri "/index.php"] [unique_id "aZleC-G3t-Rv6h9Y1NW43QAAAAU"] [Sat Feb 21 12:26:05.696299 2026] [security2:error] [pid 1960211:tid 1960211] [client 178.16.52.111:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-ip": Permission denied [hostname "medimage.com.pk"] [uri "/index.php"] [unique_id "aZleC-G3t-Rv6h9Y1NW43QAAAAU"] [Sat Feb 21 12:26:09.438692 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:26:12.418872 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleFLQytPl9f6K_EmrFOQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2 [Sat Feb 21 12:26:12.418976 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleFLQytPl9f6K_EmrFOQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2 [Sat Feb 21 12:26:15.296474 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 124.248.189.223:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 12:26:31.476528 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleJ7QytPl9f6K_EmrFQQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 12:26:31.476676 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleJ7QytPl9f6K_EmrFQQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 12:26:35.514163 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:27:11.071951 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:27:12.348968 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:27:12.716102 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:27:20.835792 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleWOnNlyfrsrZbi4_o6wAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:27:20.835908 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleWOnNlyfrsrZbi4_o6wAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:27:27.747357 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleX1d6fqP3Bq8xHbOLYAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:27:27.747517 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleX1d6fqP3Bq8xHbOLYAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:27:28.205597 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:27:50.259127 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZledrQytPl9f6K_EmrFZAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 12:27:50.259194 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZledrQytPl9f6K_EmrFZAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 12:27:51.244366 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZled-nNlyfrsrZbi4_o-QAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 12:27:51.244432 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZled-nNlyfrsrZbi4_o-QAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 12:28:23.376011 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 60.4.29.143:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:28:24.624932 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:28:37.498524 2026] [security2:error] [pid 1942097:tid 1942097] [client 66.249.68.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/clouditzone-global": Permission denied [hostname "clouditzone.com"] [uri "/css/font-awesome.css"] [unique_id "aZlepYZy3zgfuTKkxEXsFQAAAAs"], referer: https://clouditzone.com/style.css [Sat Feb 21 12:28:37.498645 2026] [security2:error] [pid 1942097:tid 1942097] [client 66.249.68.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/clouditzone-ip": Permission denied [hostname "clouditzone.com"] [uri "/css/font-awesome.css"] [unique_id "aZlepYZy3zgfuTKkxEXsFQAAAAs"], referer: https://clouditzone.com/style.css [Sat Feb 21 12:28:58.140835 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleuuG3t-Rv6h9Y1NW5OAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 12:28:58.140929 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZleuuG3t-Rv6h9Y1NW5OAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 12:29:00.280171 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlevIZy3zgfuTKkxEXsIAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 12:29:00.280230 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlevIZy3zgfuTKkxEXsIAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 12:29:06.778130 2026] [security2:error] [pid 1975250:tid 1975250] [client 111.170.7.87:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZlewld6fqP3Bq8xHbOLnQAAAAo"] [Sat Feb 21 12:29:06.778215 2026] [security2:error] [pid 1975250:tid 1975250] [client 111.170.7.87:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZlewld6fqP3Bq8xHbOLnQAAAAo"] [Sat Feb 21 12:29:17.381078 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:29:23.889773 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:29:25.148132 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:29:29.272237 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:29:33.401158 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:29:38.811516 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZle4uS62LFr1sxUkG_hxwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:29:38.811616 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZle4uS62LFr1sxUkG_hxwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 12:29:40.418852 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 12:29:40.691913 2026] [security2:error] [pid 1960429:tid 1960429] [client 40.77.167.35:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZle5OS62LFr1sxUkG_hyAAAAAA"] [Sat Feb 21 12:29:48.453195 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:29:50.751633 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.77.167.28:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZle7unNlyfrsrZbi4_pQQAAAAQ"] [Sat Feb 21 12:29:54.902609 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:30:02.278183 2026] [access_compat:error] [pid 1942097:tid 1942097] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:30:03.521081 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZle-7zLGJ4Gu6sWT2EXLAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 12:30:03.521146 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZle-7zLGJ4Gu6sWT2EXLAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 12:30:09.174959 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:30:16.701752 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 111.170.7.87:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 12:30:21.585715 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfDdLbd4zJn3wkh3dyoQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:30:21.585794 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfDdLbd4zJn3wkh3dyoQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:30:48.436831 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfKLzLGJ4Gu6sWT2EXQAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 12:30:48.436920 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfKLzLGJ4Gu6sWT2EXQAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 12:30:55.433790 2026] [security2:error] [pid 1975250:tid 1975250] [client 51.75.151.149:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-content/plugins/cidaas-pro-master/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "advertwisely.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZlfL1d6fqP3Bq8xHbOL0AAAAAo"] [Sat Feb 21 12:31:02.099076 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfNRHl2U-jS0ZSEvYMjQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2 [Sat Feb 21 12:31:02.099169 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfNRHl2U-jS0ZSEvYMjQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2 [Sat Feb 21 12:31:12.168724 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:31:15.814389 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfQ-S62LFr1sxUkG_h8gAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 12:31:15.814541 2026] [security2:error] [pid 1960429:tid 1960429] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfQ-S62LFr1sxUkG_h8gAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 12:31:39.952797 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfW4Zy3zgfuTKkxEXsZQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 12:31:39.952883 2026] [security2:error] [pid 1942097:tid 1942097] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfW4Zy3zgfuTKkxEXsZQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 12:32:11.414410 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfe7QytPl9f6K_EmrF6AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 12:32:11.414578 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfe7QytPl9f6K_EmrF6AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 12:32:13.334130 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:32:15.135865 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlff7QytPl9f6K_EmrF6gAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:32:15.135961 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlff7QytPl9f6K_EmrF6gAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:32:23.313200 2026] [security2:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "247reactionpower.com"] [uri "/wp-admin/user/index.php"] [unique_id "aZlfh9Lbd4zJn3wkh3dy1AAAAAc"] [Sat Feb 21 12:32:23.313361 2026] [security2:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "247reactionpower.com"] [uri "/wp-admin/user/index.php"] [unique_id "aZlfh9Lbd4zJn3wkh3dy1AAAAAc"] [Sat Feb 21 12:32:24.510357 2026] [security2:error] [pid 1967762:tid 1967762] [client 52.167.144.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/wp-content/uploads/elementor/css/post-290.css"] [unique_id "aZlfiLzLGJ4Gu6sWT2EXawAAAAY"] [Sat Feb 21 12:32:24.510468 2026] [security2:error] [pid 1967762:tid 1967762] [client 52.167.144.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/wp-content/uploads/elementor/css/post-290.css"] [unique_id "aZlfiLzLGJ4Gu6sWT2EXawAAAAY"] [Sat Feb 21 12:32:36.408740 2026] [security2:error] [pid 1960664:tid 1960664] [client 52.167.144.234:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/wp-content/plugins/elementor/assets/css/widget-heading.min.css"] [unique_id "aZlflNLbd4zJn3wkh3dy3gAAAAc"] [Sat Feb 21 12:32:36.408809 2026] [security2:error] [pid 1960664:tid 1960664] [client 52.167.144.234:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/wp-content/plugins/elementor/assets/css/widget-heading.min.css"] [unique_id "aZlflNLbd4zJn3wkh3dy3gAAAAc"] [Sat Feb 21 12:32:39.293794 2026] [negotiation:error] [pid 1960429:tid 1960429] [client 20.189.202.45:0] AH00687: Negotiation: discovered file(s) matching request: /home/www247rp/public_html/index (None could be negotiated). [Sat Feb 21 12:32:48.175960 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfoBHl2U-jS0ZSEvYMxQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:32:48.176064 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfoBHl2U-jS0ZSEvYMxQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:32:58.966350 2026] [negotiation:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00687: Negotiation: discovered file(s) matching request: /home/www247rp/public_html/index (None could be negotiated). [Sat Feb 21 12:33:01.759531 2026] [security2:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "247reactionpower.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZlfrbQytPl9f6K_EmrGBgAAAAE"] [Sat Feb 21 12:33:01.759614 2026] [security2:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "247reactionpower.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZlfrbQytPl9f6K_EmrGBgAAAAE"] [Sat Feb 21 12:33:22.545762 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:33:33.114960 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfzeG3t-Rv6h9Y1NW5uwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0 [Sat Feb 21 12:33:33.115058 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlfzeG3t-Rv6h9Y1NW5uwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0 [Sat Feb 21 12:33:38.910232 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlf0tLbd4zJn3wkh3dzAgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 12:33:38.910351 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlf0tLbd4zJn3wkh3dzAgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 12:34:10.115707 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlf8ld6fqP3Bq8xHbOMMwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 12:34:10.115815 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlf8ld6fqP3Bq8xHbOMMwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 12:34:13.275080 2026] [core:error] [pid 1960664:tid 1960664] [client 20.197.194.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:34:13.275248 2026] [core:error] [pid 1960664:tid 1960664] [client 20.197.194.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:34:13.474857 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/sm.php [Sat Feb 21 12:34:13.476255 2026] [core:error] [pid 1950054:tid 1950054] [client 20.197.194.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:34:13.675324 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/sc.php [Sat Feb 21 12:34:13.676625 2026] [core:error] [pid 1956767:tid 1956767] [client 20.197.194.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:34:13.878925 2026] [core:error] [pid 1967762:tid 1967762] [client 20.197.194.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:34:13.878992 2026] [core:error] [pid 1967762:tid 1967762] [client 20.197.194.128:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:34:21.466806 2026] [security2:error] [pid 1950054:tid 1950054] [client 103.160.145.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlf_MtCgl1jApX7wejDlgAAAAg"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 12:34:21.466876 2026] [security2:error] [pid 1950054:tid 1950054] [client 103.160.145.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlf_MtCgl1jApX7wejDlgAAAAg"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 12:34:59.172639 2026] [security2:error] [pid 1926602:tid 1926602] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlgIhHl2U-jS0ZSEvYNBgAAAAM"] [Sat Feb 21 12:34:59.172698 2026] [security2:error] [pid 1926602:tid 1926602] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlgIhHl2U-jS0ZSEvYNBgAAAAM"] [Sat Feb 21 12:35:22.571473 2026] [security2:error] [pid 1960211:tid 1960211] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlgOeG3t-Rv6h9Y1NW58gAAAAU"] [Sat Feb 21 12:35:22.571528 2026] [security2:error] [pid 1960211:tid 1960211] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlgOeG3t-Rv6h9Y1NW58gAAAAU"] [Sat Feb 21 12:35:29.573078 2026] [security2:error] [pid 1956767:tid 1956767] [client 57.130.20.252:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlgQLQytPl9f6K_EmrGTwAAAAE"] [Sat Feb 21 12:35:29.573154 2026] [security2:error] [pid 1956767:tid 1956767] [client 57.130.20.252:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlgQLQytPl9f6K_EmrGTwAAAAE"] [Sat Feb 21 12:35:37.084354 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/hello.world"] [unique_id "aZlgSenNlyfrsrZbi4_p7QAAAAQ"] [Sat Feb 21 12:35:37.084553 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/hello.world"] [unique_id "aZlgSenNlyfrsrZbi4_p7QAAAAQ"] [Sat Feb 21 12:35:37.267609 2026] [security2:error] [pid 1960211:tid 1960211] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/"] [unique_id "aZlgSeG3t-Rv6h9Y1NW5_AAAAAU"] [Sat Feb 21 12:35:37.267761 2026] [security2:error] [pid 1960211:tid 1960211] [client 89.117.22.117:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/"] [unique_id "aZlgSeG3t-Rv6h9Y1NW5_AAAAAU"] [Sat Feb 21 12:35:37.438105 2026] [security2:error] [pid 1967762:tid 1967762] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgSbzLGJ4Gu6sWT2EX1wAAAAY"] [Sat Feb 21 12:35:37.603162 2026] [security2:error] [pid 1942097:tid 1942097] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZlgSYZy3zgfuTKkxEXs4QAAAAs"] [Sat Feb 21 12:35:37.640754 2026] [security2:error] [pid 1960664:tid 1960664] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlgSNLbd4zJn3wkh3dzPgAAAAc"] [Sat Feb 21 12:35:37.640865 2026] [security2:error] [pid 1960664:tid 1960664] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlgSNLbd4zJn3wkh3dzPgAAAAc"] [Sat Feb 21 12:35:37.759150 2026] [security2:error] [pid 1960429:tid 1960429] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgSeS62LFr1sxUkG_iewAAAAA"] [Sat Feb 21 12:35:37.925091 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZlgSRHl2U-jS0ZSEvYNHwAAAAM"] [Sat Feb 21 12:35:38.086771 2026] [security2:error] [pid 1967762:tid 1967762] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aZlgSrzLGJ4Gu6sWT2EX2AAAAAY"] [Sat Feb 21 12:35:38.250826 2026] [security2:error] [pid 1956767:tid 1956767] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgSrQytPl9f6K_EmrGVQAAAAE"] [Sat Feb 21 12:35:38.407277 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgSunNlyfrsrZbi4_p7wAAAAQ"] [Sat Feb 21 12:35:38.562590 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZlgShHl2U-jS0ZSEvYNIAAAAAM"] [Sat Feb 21 12:35:38.740002 2026] [security2:error] [pid 1960211:tid 1960211] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgSuG3t-Rv6h9Y1NW5_gAAAAU"] [Sat Feb 21 12:35:38.902057 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZlgSld6fqP3Bq8xHbOMZgAAAAo"] [Sat Feb 21 12:35:39.078780 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgS-nNlyfrsrZbi4_p8AAAAAQ"] [Sat Feb 21 12:35:39.369829 2026] [security2:error] [pid 1960211:tid 1960211] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZlgS-G3t-Rv6h9Y1NW5_wAAAAU"] [Sat Feb 21 12:35:39.527152 2026] [security2:error] [pid 1967762:tid 1967762] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgS7zLGJ4Gu6sWT2EX2gAAAAY"] [Sat Feb 21 12:35:39.687523 2026] [security2:error] [pid 1960429:tid 1960429] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZlgS-S62LFr1sxUkG_ifQAAAAA"] [Sat Feb 21 12:35:39.845537 2026] [security2:error] [pid 1956767:tid 1956767] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgS7QytPl9f6K_EmrGVwAAAAE"] [Sat Feb 21 12:35:40.006497 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTBHl2U-jS0ZSEvYNIgAAAAM"] [Sat Feb 21 12:35:40.164069 2026] [security2:error] [pid 1942097:tid 1942097] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTIZy3zgfuTKkxEXs5AAAAAs"] [Sat Feb 21 12:35:40.321708 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTFd6fqP3Bq8xHbOMaAAAAAo"] [Sat Feb 21 12:35:40.477058 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTBHl2U-jS0ZSEvYNIwAAAAM"] [Sat Feb 21 12:35:40.643426 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTOnNlyfrsrZbi4_p8gAAAAQ"] [Sat Feb 21 12:35:40.806535 2026] [security2:error] [pid 1950054:tid 1950054] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTMtCgl1jApX7wejDwAAAAAg"] [Sat Feb 21 12:35:40.973958 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTFd6fqP3Bq8xHbOMaQAAAAo"] [Sat Feb 21 12:35:41.133366 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTRHl2U-jS0ZSEvYNJAAAAAM"] [Sat Feb 21 12:35:41.298016 2026] [security2:error] [pid 1960429:tid 1960429] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTeS62LFr1sxUkG_ifwAAAAA"] [Sat Feb 21 12:35:41.454781 2026] [security2:error] [pid 1967762:tid 1967762] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTbzLGJ4Gu6sWT2EX3AAAAAY"] [Sat Feb 21 12:35:41.624581 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTVd6fqP3Bq8xHbOMagAAAAo"] [Sat Feb 21 12:35:41.794415 2026] [security2:error] [pid 1960664:tid 1960664] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTdLbd4zJn3wkh3dzQgAAAAc"] [Sat Feb 21 12:35:41.959410 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTRHl2U-jS0ZSEvYNJQAAAAM"] [Sat Feb 21 12:35:42.123531 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTunNlyfrsrZbi4_p9AAAAAQ"] [Sat Feb 21 12:35:42.286096 2026] [security2:error] [pid 1950054:tid 1950054] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTstCgl1jApX7wejDwgAAAAg"] [Sat Feb 21 12:35:42.443280 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTld6fqP3Bq8xHbOMawAAAAo"] [Sat Feb 21 12:35:42.601770 2026] [security2:error] [pid 1960429:tid 1960429] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTuS62LFr1sxUkG_igQAAAAA"] [Sat Feb 21 12:35:42.760162 2026] [security2:error] [pid 1949603:tid 1949603] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTunNlyfrsrZbi4_p9QAAAAQ"] [Sat Feb 21 12:35:42.918105 2026] [security2:error] [pid 1967762:tid 1967762] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTrzLGJ4Gu6sWT2EX3gAAAAY"] [Sat Feb 21 12:35:43.091795 2026] [security2:error] [pid 1960211:tid 1960211] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgT-G3t-Rv6h9Y1NW6AwAAAAU"] [Sat Feb 21 12:35:43.249674 2026] [security2:error] [pid 1960429:tid 1960429] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgT-S62LFr1sxUkG_iggAAAAA"] [Sat Feb 21 12:35:43.406396 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZlgTxHl2U-jS0ZSEvYNJwAAAAM"] [Sat Feb 21 12:35:43.566411 2026] [security2:error] [pid 1950054:tid 1950054] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgT8tCgl1jApX7wejDxAAAAAg"] [Sat Feb 21 12:35:43.720732 2026] [security2:error] [pid 1960211:tid 1960211] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/public/index.php"] [unique_id "aZlgT-G3t-Rv6h9Y1NW6BAAAAAU"] [Sat Feb 21 12:35:43.874507 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgT1d6fqP3Bq8xHbOMbQAAAAo"] [Sat Feb 21 12:35:43.874617 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgT1d6fqP3Bq8xHbOMbQAAAAo"] [Sat Feb 21 12:35:43.874842 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create /&/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgT1d6fqP3Bq8xHbOMbQAAAAo"] [Sat Feb 21 12:35:43.874992 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create/&/<?echo(md5(hi)) ?>/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgT1d6fqP3Bq8xHbOMbQAAAAo"] [Sat Feb 21 12:35:43.875415 2026] [security2:error] [pid 1975250:tid 1975250] [client 89.117.22.117:0] ModSecurity: Warning. Pattern match "(?:<\\\\?(?!xml\\\\s)|<\\\\?php|\\\\[(?:/|\\\\\\\\)?php\\\\])" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "41"] [id "933100"] [msg "PHP Injection Attack: PHP Open Tag Found"] [data "Matched Data: <? found within ARGS_NAMES:/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php: /<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgT1d6fqP3Bq8xHbOMbQAAAAo"] [Sat Feb 21 12:35:44.030944 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgUBHl2U-jS0ZSEvYNKAAAAAM"] [Sat Feb 21 12:35:44.031019 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgUBHl2U-jS0ZSEvYNKAAAAAM"] [Sat Feb 21 12:35:44.031153 2026] [security2:error] [pid 1926602:tid 1926602] [client 89.117.22.117:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZlgUBHl2U-jS0ZSEvYNKAAAAAM"] [Sat Feb 21 12:35:47.376327 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgU7zLGJ4Gu6sWT2EX4gAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0 [Sat Feb 21 12:35:47.376405 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgU7zLGJ4Gu6sWT2EX4gAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0 [Sat Feb 21 12:36:13.002150 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:36:17.044338 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgcOnNlyfrsrZbi4_qCAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:36:17.044492 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgcOnNlyfrsrZbi4_qCAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:36:31.076777 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgfrzLGJ4Gu6sWT2EX9QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:36:31.076895 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgfrzLGJ4Gu6sWT2EX9QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:36:41.207085 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:36:41.249236 2026] [access_compat:error] [pid 1960429:tid 1960429] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:36:46.858538 2026] [security2:error] [pid 1975250:tid 1975250] [client 216.213.27.206:0] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "serversvalley.com"] [uri "/contact.html"] [unique_id "aZlgjld6fqP3Bq8xHbOMjQAAAAo"], referer: http://serversvalley.com/contact.html [Sat Feb 21 12:36:46.858658 2026] [security2:error] [pid 1975250:tid 1975250] [client 216.213.27.206:0] ModSecurity: Warning. Found 1 byte(s) in ARGS:token outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "serversvalley.com"] [uri "/contact.html"] [unique_id "aZlgjld6fqP3Bq8xHbOMjQAAAAo"], referer: http://serversvalley.com/contact.html [Sat Feb 21 12:36:51.043134 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:36:55.320825 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgl7zLGJ4Gu6sWT2EYAQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq%2F1 [Sat Feb 21 12:36:55.320930 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgl7zLGJ4Gu6sWT2EYAQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq%2F1 [Sat Feb 21 12:36:58.169781 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 66.249.79.202:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 12:37:23.269501 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/166.php [Sat Feb 21 12:37:23.635271 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/2026.php [Sat Feb 21 12:37:24.063529 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/muzu.php [Sat Feb 21 12:37:24.419124 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/reze.php [Sat Feb 21 12:37:24.767958 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/jsond.php [Sat Feb 21 12:37:25.334536 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/x7.php [Sat Feb 21 12:37:25.684849 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/bgymj.php [Sat Feb 21 12:37:26.097451 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/lala.php [Sat Feb 21 12:37:26.486418 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/8xyz.php [Sat Feb 21 12:37:26.875215 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wsd.php [Sat Feb 21 12:37:27.688035 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/la.php [Sat Feb 21 12:37:28.109356 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/Wp-good.php [Sat Feb 21 12:37:28.463698 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/tphp.php [Sat Feb 21 12:37:28.464218 2026] [security2:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlguLQytPl9f6K_EmrGjgAAAAE"] [Sat Feb 21 12:37:28.464288 2026] [security2:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlguLQytPl9f6K_EmrGjgAAAAE"] [Sat Feb 21 12:37:29.178958 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/a1.php [Sat Feb 21 12:37:29.537989 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/nyan.php [Sat Feb 21 12:37:30.020261 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/autoload_classmap.php [Sat Feb 21 12:37:30.453944 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/alfa.php [Sat Feb 21 12:37:31.177603 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/luxe.php [Sat Feb 21 12:37:32.016093 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/rezor.php [Sat Feb 21 12:37:32.365891 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/doc.php [Sat Feb 21 12:37:33.559946 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/install.php [Sat Feb 21 12:37:34.416818 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/sto.php [Sat Feb 21 12:37:34.787921 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/x.php [Sat Feb 21 12:37:35.142863 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/test.php [Sat Feb 21 12:37:35.882112 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/n3.php [Sat Feb 21 12:37:36.608872 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/o.php [Sat Feb 21 12:37:37.320117 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/class-t.api.php [Sat Feb 21 12:37:38.046047 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp.php [Sat Feb 21 12:37:39.099899 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/h.php [Sat Feb 21 12:37:39.821583 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wrt.php [Sat Feb 21 12:37:41.524205 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/png.php [Sat Feb 21 12:37:42.307553 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/zwso.php [Sat Feb 21 12:37:43.756429 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ton.php [Sat Feb 21 12:37:44.105398 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wso.php [Sat Feb 21 12:37:44.914589 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/a2.php [Sat Feb 21 12:37:45.263725 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/shell.php [Sat Feb 21 12:37:45.316786 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:37:45.961111 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/sxo.php [Sat Feb 21 12:37:46.223527 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgyld6fqP3Bq8xHbOMtgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 12:37:46.223678 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlgyld6fqP3Bq8xHbOMtgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 12:37:47.073110 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/mans.php [Sat Feb 21 12:37:47.448437 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/dropdown.php [Sat Feb 21 12:37:48.323514 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ze.php [Sat Feb 21 12:37:48.723815 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/geck.php [Sat Feb 21 12:37:49.120948 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/menu.php [Sat Feb 21 12:37:49.821301 2026] [negotiation:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH00687: Negotiation: discovered file(s) matching request: /home/advertwisely/public_html/index (None could be negotiated). [Sat Feb 21 12:37:50.189598 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/flower.php [Sat Feb 21 12:37:50.539334 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ftp.php [Sat Feb 21 12:37:51.037266 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/mds.php [Sat Feb 21 12:37:51.390914 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ahax.php [Sat Feb 21 12:37:52.211827 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/cool.php [Sat Feb 21 12:37:52.562242 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/gm.php [Sat Feb 21 12:37:53.088583 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/simple.php [Sat Feb 21 12:37:53.505083 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/elp.php [Sat Feb 21 12:37:53.859334 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/bolt.php [Sat Feb 21 12:37:54.660152 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/inputs.php [Sat Feb 21 12:37:55.505365 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/system.php [Sat Feb 21 12:37:56.973666 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/an.php [Sat Feb 21 12:37:57.340764 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/w.php [Sat Feb 21 12:37:57.747296 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/gmo.php [Sat Feb 21 12:37:58.110735 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/gib.php [Sat Feb 21 12:37:58.506454 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-miiss.php.php [Sat Feb 21 12:37:59.236575 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/moon.php [Sat Feb 21 12:37:59.582708 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/filesss.php [Sat Feb 21 12:37:59.948842 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/hey.php [Sat Feb 21 12:38:00.685807 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/1337.php [Sat Feb 21 12:38:01.287380 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/buy.php [Sat Feb 21 12:38:02.031847 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/m.php [Sat Feb 21 12:38:02.191557 2026] [security2:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/wp-is.php"] [unique_id "aZlg2rzLGJ4Gu6sWT2EYNQAAAAY"] [Sat Feb 21 12:38:02.191796 2026] [security2:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/wp-is.php"] [unique_id "aZlg2rzLGJ4Gu6sWT2EYNQAAAAY"] [Sat Feb 21 12:38:02.379125 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-is.php [Sat Feb 21 12:38:02.728809 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/jmfi2.php [Sat Feb 21 12:38:03.471537 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/bnn_.php [Sat Feb 21 12:38:04.184182 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/hzz.php [Sat Feb 21 12:38:04.535319 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/shell20211028.php [Sat Feb 21 12:38:05.728678 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ps.php [Sat Feb 21 12:38:06.802559 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/cache.php [Sat Feb 21 12:38:07.159920 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ss.php [Sat Feb 21 12:38:07.508286 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/p.php [Sat Feb 21 12:38:08.307051 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/user.php [Sat Feb 21 12:38:09.504368 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp.php [Sat Feb 21 12:38:10.046102 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/rip.php [Sat Feb 21 12:38:10.412403 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp4.php [Sat Feb 21 12:38:10.776143 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/403.php [Sat Feb 21 12:38:11.587538 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/asd67.php [Sat Feb 21 12:38:12.284944 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/oivcl.php [Sat Feb 21 12:38:13.338500 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/v2.php [Sat Feb 21 12:38:13.962537 2026] [security2:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZlg5ctCgl1jApX7wejEHAAAAAg"] [Sat Feb 21 12:38:13.962623 2026] [security2:error] [pid 1950054:tid 1950054] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZlg5ctCgl1jApX7wejEHAAAAAg"] [Sat Feb 21 12:38:15.635792 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/dr.php [Sat Feb 21 12:38:15.987662 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/raw.php [Sat Feb 21 12:38:17.097737 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ioxi-o2.php [Sat Feb 21 12:38:17.446690 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/dropdown.php [Sat Feb 21 12:38:17.795502 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/dlu.php [Sat Feb 21 12:38:18.508407 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/db.php [Sat Feb 21 12:38:19.012895 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/packed.php [Sat Feb 21 12:38:19.373332 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-configs.php [Sat Feb 21 12:38:19.720933 2026] [access_compat:error] [pid 1960211:tid 1960211] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/404.php [Sat Feb 21 12:38:20.069120 2026] [access_compat:error] [pid 1967762:tid 1967762] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/des.php [Sat Feb 21 12:38:20.785182 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/lufix.php [Sat Feb 21 12:39:04.110625 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhGNLbd4zJn3wkh3dzxAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 12:39:04.110899 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhGNLbd4zJn3wkh3dzxAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 12:39:18.097136 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.154.180.55:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlhJenNlyfrsrZbi4_qcQAAAAQ"] [Sat Feb 21 12:39:18.097195 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.154.180.55:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlhJenNlyfrsrZbi4_qcQAAAAQ"] [Sat Feb 21 12:39:42.267411 2026] [security2:error] [pid 1960664:tid 1960664] [client 20.194.25.241:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-global": Permission denied [hostname "mastercomm.net.pk"] [uri "/cool.php"] [unique_id "aZlhPtLbd4zJn3wkh3dz3AAAAAc"] [Sat Feb 21 12:39:42.267488 2026] [security2:error] [pid 1960664:tid 1960664] [client 20.194.25.241:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-ip": Permission denied [hostname "mastercomm.net.pk"] [uri "/cool.php"] [unique_id "aZlhPtLbd4zJn3wkh3dz3AAAAAc"] [Sat Feb 21 12:39:53.009663 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:40:28.563890 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhbFd6fqP3Bq8xHbONJAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0 [Sat Feb 21 12:40:28.564002 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhbFd6fqP3Bq8xHbONJAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0 [Sat Feb 21 12:40:35.315923 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhc9Lbd4zJn3wkh3dz_gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 12:40:35.316042 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhc9Lbd4zJn3wkh3dz_gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 12:40:38.888198 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhdunNlyfrsrZbi4_qpQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem [Sat Feb 21 12:40:38.888277 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhdunNlyfrsrZbi4_qpQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem [Sat Feb 21 12:40:51.020810 2026] [security2:error] [pid 1975250:tid 1975250] [client 107.189.1.179:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlhgld6fqP3Bq8xHbONLgAAAAo"] [Sat Feb 21 12:40:51.020922 2026] [security2:error] [pid 1975250:tid 1975250] [client 107.189.1.179:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlhgld6fqP3Bq8xHbONLgAAAAo"] [Sat Feb 21 12:40:51.505946 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhg-nNlyfrsrZbi4_qqwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:40:51.506005 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlhg-nNlyfrsrZbi4_qqwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:40:57.817572 2026] [security2:error] [pid 1967762:tid 1967762] [client 114.119.136.203:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within REQUEST_COOKIES:rfqtk_wp_session_a26785922b3516fe627bab9726c66e43: d4cee8322c5ca164f7e6559dc156bfcb||1774251654||1774359654"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "spotliteworld.com"] [uri "/shop/"] [unique_id "aZlhibzLGJ4Gu6sWT2EYoQAAAAY"] [Sat Feb 21 12:41:25.485065 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:42:15.336258 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlh1_kdT_IobDccX58R5AAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq%2F2 [Sat Feb 21 12:42:15.336431 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlh1_kdT_IobDccX58R5AAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq%2F2 [Sat Feb 21 12:42:58.721689 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:58.721761 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:58.984448 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:58.984505 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:59.326657 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:59.326723 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:59.569931 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:59.569998 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:59.831451 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:42:59.831521 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:00.074568 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:00.074630 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:00.526592 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:00.526667 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:00.832749 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:00.832853 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:01.331813 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:01.331874 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:01.589092 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:01.589137 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:01.853447 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:01.853526 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.097093 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.097172 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.340798 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.340891 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.584446 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.584508 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.827733 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:02.827799 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.084461 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.084509 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.326929 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.326974 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.445960 2026] [security2:error] [pid 1949603:tid 1949603] [client 52.178.176.146:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZliBunNlyfrsrZbi4_q7gAAAAQ"] [Sat Feb 21 12:43:03.446065 2026] [security2:error] [pid 1949603:tid 1949603] [client 52.178.176.146:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZliBunNlyfrsrZbi4_q7gAAAAQ"] [Sat Feb 21 12:43:03.574508 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.574563 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.832629 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:03.832686 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.095077 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.095132 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.337565 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.337609 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.648323 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.648393 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.892295 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:04.892354 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.145524 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.145582 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.387823 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.387884 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.652618 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.652670 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.905767 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:05.905799 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.149592 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.149665 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.393483 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.393546 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.639217 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.639285 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.882005 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:06.882068 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:07.137933 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:07.137994 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:07.540795 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:07.540896 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:07.799712 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:07.799746 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:08.041895 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:08.041941 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:08.284185 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:08.284230 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:08.608693 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:08.608762 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:09.328772 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:09.328843 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:09.347408 2026] [security2:error] [pid 1950054:tid 1950054] [client 20.214.158.14:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-global": Permission denied [hostname "mail.ahk.com.pk"] [uri "/index.php"] [unique_id "aZliDctCgl1jApX7wejExAAAAAg"] [Sat Feb 21 12:43:09.347477 2026] [security2:error] [pid 1950054:tid 1950054] [client 20.214.158.14:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-ip": Permission denied [hostname "mail.ahk.com.pk"] [uri "/index.php"] [unique_id "aZliDctCgl1jApX7wejExAAAAAg"] [Sat Feb 21 12:43:09.571646 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:09.571695 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:09.813989 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:09.814057 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:10.463371 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:10.463443 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:10.729823 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:10.729890 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:10.975113 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:10.975178 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.232602 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.232662 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.493067 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.493132 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.735422 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.735485 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.977355 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:11.977401 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.219719 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.219778 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.482133 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.482206 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.727058 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.727114 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.988821 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:12.988899 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:13.253918 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:13.253966 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:13.658369 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:13.658422 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:13.901645 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:13.901706 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.147945 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.148008 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.405029 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.405072 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.663416 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.663483 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.922764 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:14.922805 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.168937 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.168991 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.422671 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.422720 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.665708 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.665779 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.908873 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:15.908917 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.179613 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.179697 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.435339 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.435385 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.691558 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.691609 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.941596 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:16.941644 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:17.183957 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:17.184013 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:17.441649 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:17.441693 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:17.700277 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:17.700334 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:18.606578 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:18.606670 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:18.860574 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:18.860622 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.124860 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.124919 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.371089 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.371145 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.636744 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.636799 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.900524 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:19.900588 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:20.144082 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:20.144165 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:20.387537 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:20.387616 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:20.641456 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:20.641507 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:21.281760 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:21.281816 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:21.536238 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:21.536282 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:21.778852 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:21.778899 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.063029 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.063093 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.321391 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.321463 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.580162 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.580230 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.833961 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:22.834002 2026] [core:error] [pid 1956767:tid 1956767] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.103536 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.103643 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.372218 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.372311 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.636049 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.636120 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.895654 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:23.895735 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:24.434853 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:24.434973 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:24.691378 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:24.691422 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:24.970474 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:24.970547 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.226041 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.226109 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.468459 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.468531 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.726177 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.726241 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.983759 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:25.983844 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:26.238755 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:26.238858 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:26.481480 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:26.481537 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:27.377350 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:27.377415 2026] [core:error] [pid 1960664:tid 1960664] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:27.635953 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:27.636031 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:27.885500 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliH8tCgl1jApX7wejE1AAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:43:27.885570 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliH8tCgl1jApX7wejE1AAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:43:27.886782 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:27.886850 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.129815 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.129890 2026] [core:error] [pid 1926602:tid 1926602] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.384865 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.384922 2026] [core:error] [pid 1975250:tid 1975250] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.629808 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.629870 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.891635 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:28.891691 2026] [core:error] [pid 1960211:tid 1960211] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.139700 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.139760 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.388231 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.388284 2026] [core:error] [pid 1950054:tid 1950054] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.630104 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.630153 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.921153 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:29.921188 2026] [core:error] [pid 1949603:tid 1949603] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.188785 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.188858 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.447599 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.447663 2026] [core:error] [pid 1985392:tid 1985392] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.713188 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.713296 2026] [core:error] [pid 1967762:tid 1967762] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.968779 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:30.968838 2026] [core:error] [pid 1985129:tid 1985129] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:43:35.605382 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliJ7QytPl9f6K_EmrHeQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda [Sat Feb 21 12:43:35.605520 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliJ7QytPl9f6K_EmrHeQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda [Sat Feb 21 12:43:36.783183 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliKFd6fqP3Bq8xHbONkgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 12:43:36.783237 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliKFd6fqP3Bq8xHbONkgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 12:43:42.489868 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliLld6fqP3Bq8xHbONlQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 12:43:42.489938 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliLld6fqP3Bq8xHbONlQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 12:43:57.992504 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliPeG3t-Rv6h9Y1NW7MAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:43:57.992581 2026] [security2:error] [pid 1960211:tid 1960211] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliPeG3t-Rv6h9Y1NW7MAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:44:05.710789 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliRbQytPl9f6K_EmrHhwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:44:05.710925 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliRbQytPl9f6K_EmrHhwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 12:44:14.672637 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:44:18.970780 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliUtLbd4zJn3wkh3d0ewAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 12:44:18.970872 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliUtLbd4zJn3wkh3d0ewAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 12:44:22.983119 2026] [security2:error] [pid 1960664:tid 1960664] [client 52.167.144.218:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'so1c' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: so1c found within ARGS:e: '-\\x07.-\\x19\\x14I2-\\x042#L*L-*2\\x022#1\\x07*4\\x15-zz-JYOwOT0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZliVtLbd4zJn3wkh3d0fgAAAAc"] [Sat Feb 21 12:44:30.506395 2026] [security2:error] [pid 1926602:tid 1926602] [client 176.65.132.217:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "des-pvt.com"] [uri "/web.config"] [unique_id "aZliXhHl2U-jS0ZSEvYOYQAAAAM"], referer: http://des-pvt.com/ [Sat Feb 21 12:44:30.506668 2026] [security2:error] [pid 1950054:tid 1950054] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.env.bak"] [unique_id "aZliXstCgl1jApX7wejE9gAAAAg"], referer: http://des-pvt.com/ [Sat Feb 21 12:44:30.506733 2026] [security2:error] [pid 1926602:tid 1926602] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/web.config"] [unique_id "aZliXhHl2U-jS0ZSEvYOYQAAAAM"], referer: http://des-pvt.com/ [Sat Feb 21 12:44:32.168060 2026] [security2:error] [pid 1967762:tid 1967762] [client 40.77.167.71:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'so1c' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: so1c found within ARGS:e: '-\\x07.-\\x19\\x14I2-\\x042#L*L-*2\\x022#1\\x07*4\\x15-zz-JYOwOT0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZliYLzLGJ4Gu6sWT2EZIQAAAAY"] [Sat Feb 21 12:44:32.435859 2026] [security2:error] [pid 1960211:tid 1960211] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/composer.json"] [unique_id "aZliYOG3t-Rv6h9Y1NW7RQAAAAU"], referer: http://des-pvt.com/ [Sat Feb 21 12:44:35.575311 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:44:41.582042 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:44:48.337807 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlicNLbd4zJn3wkh3d0jQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:44:48.337894 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlicNLbd4zJn3wkh3d0jQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:45:00.262835 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/9.php [Sat Feb 21 12:45:00.510656 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/70.php [Sat Feb 21 12:45:00.804473 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/y.php [Sat Feb 21 12:45:01.055326 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/yas.php [Sat Feb 21 12:45:01.306660 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/19.php [Sat Feb 21 12:45:01.562229 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/86.php [Sat Feb 21 12:45:01.827432 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/v.php [Sat Feb 21 12:45:02.111931 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/i.php [Sat Feb 21 12:45:02.373944 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/66.php [Sat Feb 21 12:45:02.622765 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/p.php [Sat Feb 21 12:45:02.871677 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/t.php [Sat Feb 21 12:45:03.211686 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/e.php [Sat Feb 21 12:45:03.459062 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.89.58.48:0] AH01797: client denied by server configuration: /home/masterco/public_html/5.php [Sat Feb 21 12:45:23.931017 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:45:50.219609 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlirgucuRjmpRitlBtHZQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:45:50.219687 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlirgucuRjmpRitlBtHZQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 12:46:01.198620 2026] [security2:error] [pid 1950054:tid 1950054] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZliuctCgl1jApX7wejFKgAAAAg"] [Sat Feb 21 12:46:01.198707 2026] [security2:error] [pid 1950054:tid 1950054] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZliuctCgl1jApX7wejFKgAAAAg"] [Sat Feb 21 12:46:06.104950 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlivtLbd4zJn3wkh3d0vQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fpower [Sat Feb 21 12:46:06.105041 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlivtLbd4zJn3wkh3d0vQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fpower [Sat Feb 21 12:46:12.620961 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 107.189.1.176:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-login.php, referer: http://www.google.com.hk [Sat Feb 21 12:46:12.878547 2026] [security2:error] [pid 1985129:tid 1985129] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlixPkdT_IobDccX58SdwAAAAI"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:46:12.878662 2026] [security2:error] [pid 1985129:tid 1985129] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlixPkdT_IobDccX58SdwAAAAI"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:46:17.106058 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliyQucuRjmpRitlBtHdgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 12:46:17.106124 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZliyQucuRjmpRitlBtHdgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 12:46:34.448648 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli2ld6fqP3Bq8xHbON-QAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 12:46:34.448786 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli2ld6fqP3Bq8xHbON-QAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 12:46:35.987273 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:46:39.430072 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli37QytPl9f6K_EmrH3wAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:46:39.430200 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli37QytPl9f6K_EmrH3wAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:46:46.722678 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli5rzLGJ4Gu6sWT2EZawAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem [Sat Feb 21 12:46:46.722819 2026] [security2:error] [pid 1967762:tid 1967762] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli5rzLGJ4Gu6sWT2EZawAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem [Sat Feb 21 12:46:53.639390 2026] [security2:error] [pid 1926602:tid 1926602] [client 122.181.100.86:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/xmlrpc.php"] [unique_id "aZli7RHl2U-jS0ZSEvYOswAAAAM"] [Sat Feb 21 12:46:53.639458 2026] [security2:error] [pid 1926602:tid 1926602] [client 122.181.100.86:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/xmlrpc.php"] [unique_id "aZli7RHl2U-jS0ZSEvYOswAAAAM"] [Sat Feb 21 12:47:05.210520 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli-ctCgl1jApX7wejFUAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:47:05.210626 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZli-ctCgl1jApX7wejFUAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:47:17.906820 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljBfkdT_IobDccX58SnwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 12:47:17.906912 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljBfkdT_IobDccX58SnwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 12:47:30.220924 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljEhHl2U-jS0ZSEvYOygAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F2 [Sat Feb 21 12:47:30.220983 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljEhHl2U-jS0ZSEvYOygAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F2 [Sat Feb 21 12:47:43.236835 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:47:48.783787 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljJC3-_6b3eKRK8zI1PQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fpower [Sat Feb 21 12:47:48.784040 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljJC3-_6b3eKRK8zI1PQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fpower [Sat Feb 21 12:48:32.891450 2026] [autoindex:error] [pid 1985392:tid 1985392] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:48:36.410912 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljVPkdT_IobDccX58SzwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fpower [Sat Feb 21 12:48:36.410971 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljVPkdT_IobDccX58SzwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fpower [Sat Feb 21 12:48:40.222173 2026] [security2:error] [pid 1967762:tid 1967762] [client 199.30.24.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZljUrzLGJ4Gu6sWT2EZqAAAAAY"], referer: https://www.bwtand.com/careers/ [Sat Feb 21 12:48:40.222219 2026] [security2:error] [pid 1967762:tid 1967762] [client 199.30.24.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZljUrzLGJ4Gu6sWT2EZqAAAAAY"], referer: https://www.bwtand.com/careers/ [Sat Feb 21 12:48:47.445092 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljX1d6fqP3Bq8xHbOOSAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 12:48:47.445182 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljX1d6fqP3Bq8xHbOOSAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 12:48:51.374335 2026] [access_compat:error] [pid 1950054:tid 1950054] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:48:51.410702 2026] [access_compat:error] [pid 1956767:tid 1956767] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:48:53.847186 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:48:54.281015 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljZstCgl1jApX7wejFjQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:48:54.281160 2026] [security2:error] [pid 1950054:tid 1950054] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljZstCgl1jApX7wejFjQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 12:48:58.853089 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:49:03.285653 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljb7QytPl9f6K_EmrILQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 12:49:03.285716 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljb7QytPl9f6K_EmrILQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 12:49:09.177957 2026] [cgi:error] [pid 1926602:tid 1926602] [client 52.172.248.2:0] AH02812: stderr from /home/mukyasenergy/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 12:49:11.661564 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljdwucuRjmpRitlBtH3wAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 12:49:11.661664 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljdwucuRjmpRitlBtH3wAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 12:49:30.119498 2026] [autoindex:error] [pid 1991125:tid 1991125] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:49:38.819176 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljktLbd4zJn3wkh3d1PQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:49:38.819228 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljktLbd4zJn3wkh3d1PQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:49:46.012733 2026] [autoindex:error] [pid 1949603:tid 1949603] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:49:46.251695 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljmld6fqP3Bq8xHbOObgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:49:46.251779 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljmld6fqP3Bq8xHbOObgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 12:49:52.085349 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljn1d6fqP3Bq8xHbOOcgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 12:49:52.085465 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljn1d6fqP3Bq8xHbOOcgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 12:49:53.635418 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljobQytPl9f6K_EmrITQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 12:49:53.635540 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljobQytPl9f6K_EmrITQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 12:49:55.860452 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:49:57.175486 2026] [autoindex:error] [pid 1949603:tid 1949603] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:50:03.089382 2026] [autoindex:error] [pid 1950054:tid 1950054] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:50:16.220698 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljuNLbd4zJn3wkh3d1VQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:50:16.220759 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZljuNLbd4zJn3wkh3d1VQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 12:50:16.939629 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:50:30.018589 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:50:35.300771 2026] [autoindex:error] [pid 1960664:tid 1960664] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:50:38.186684 2026] [security2:error] [pid 1985392:tid 1985392] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZljzS3-_6b3eKRK8zI1sAAAAAk"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:50:38.186745 2026] [security2:error] [pid 1985392:tid 1985392] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZljzS3-_6b3eKRK8zI1sAAAAAk"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:50:41.303201 2026] [autoindex:error] [pid 1956767:tid 1956767] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:50:46.796574 2026] [security2:error] [pid 1992003:tid 1992003] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlj1hB7zWRWEp-p13p1LwAAAAU"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:50:46.796658 2026] [security2:error] [pid 1992003:tid 1992003] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlj1hB7zWRWEp-p13p1LwAAAAU"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:50:47.954006 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:51:00.812353 2026] [security2:error] [pid 1926602:tid 1926602] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlj5BHl2U-jS0ZSEvYPRwAAAAM"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:51:00.812446 2026] [security2:error] [pid 1926602:tid 1926602] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlj5BHl2U-jS0ZSEvYPRwAAAAM"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:51:03.960634 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlj59Lbd4zJn3wkh3d1dwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 12:51:03.960751 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlj59Lbd4zJn3wkh3d1dwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 12:51:12.124537 2026] [autoindex:error] [pid 1926602:tid 1926602] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:51:16.214312 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:51:21.888059 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlj-RHl2U-jS0ZSEvYPVQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0 [Sat Feb 21 12:51:21.888148 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlj-RHl2U-jS0ZSEvYPVQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0 [Sat Feb 21 12:52:06.108037 2026] [security2:error] [pid 1975250:tid 1975250] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZlkJVd6fqP3Bq8xHbOOxgAAAAo"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:52:06.108112 2026] [security2:error] [pid 1975250:tid 1975250] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZlkJVd6fqP3Bq8xHbOOxgAAAAo"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:52:08.426304 2026] [security2:error] [pid 1985392:tid 1985392] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZlkJy3-_6b3eKRK8zI16QAAAAk"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:52:08.426403 2026] [security2:error] [pid 1985392:tid 1985392] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZlkJy3-_6b3eKRK8zI16QAAAAk"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:52:18.070698 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:52:22.981023 2026] [autoindex:error] [pid 1988869:tid 1988869] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:52:23.137673 2026] [security2:error] [pid 1956767:tid 1956767] [client 64.227.143.169:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-global": Permission denied [hostname "mrxdt.com"] [uri "/wp-login.php"] [unique_id "aZlkNrQytPl9f6K_EmrIqQAAAAE"] [Sat Feb 21 12:52:23.137729 2026] [security2:error] [pid 1956767:tid 1956767] [client 64.227.143.169:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-ip": Permission denied [hostname "mrxdt.com"] [uri "/wp-login.php"] [unique_id "aZlkNrQytPl9f6K_EmrIqQAAAAE"] [Sat Feb 21 12:52:23.137839 2026] [security2:error] [pid 1956767:tid 1956767] [client 64.227.143.169:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1252 (Permission denied) [hostname "mrxdt.com"] [uri "/wp-login.php"] [unique_id "aZlkNrQytPl9f6K_EmrIqQAAAAE"] [Sat Feb 21 12:52:33.020667 2026] [autoindex:error] [pid 1988869:tid 1988869] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 12:52:34.567688 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:52:36.591140 2026] [security2:error] [pid 1988869:tid 1988869] [client 110.249.201.159:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "serversvalley.com"] [uri "/js/accordion/style.css"] [unique_id "aZlkRAucuRjmpRitlBtIZAAAAAA"], referer: https://serversvalley.com/ [Sat Feb 21 12:52:36.591214 2026] [security2:error] [pid 1988869:tid 1988869] [client 110.249.201.159:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "serversvalley.com"] [uri "/js/accordion/style.css"] [unique_id "aZlkRAucuRjmpRitlBtIZAAAAAA"], referer: https://serversvalley.com/ [Sat Feb 21 12:52:53.455824 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkVRB7zWRWEp-p13p1gAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda [Sat Feb 21 12:52:53.455935 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkVRB7zWRWEp-p13p1gAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda [Sat Feb 21 12:53:04.591991 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkYOnNlyfrsrZbi4_scQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric [Sat Feb 21 12:53:04.592112 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkYOnNlyfrsrZbi4_scQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric [Sat Feb 21 12:53:06.721457 2026] [security2:error] [pid 1960664:tid 1960664] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlkYtLbd4zJn3wkh3d1ywAAAAc"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:53:06.721556 2026] [security2:error] [pid 1960664:tid 1960664] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlkYtLbd4zJn3wkh3d1ywAAAAc"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:53:11.559837 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkZ1d6fqP3Bq8xHbOO9AAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:53:11.559964 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkZ1d6fqP3Bq8xHbOO9AAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 12:53:20.219571 2026] [security2:error] [pid 1960664:tid 1960664] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlkb9Lbd4zJn3wkh3d10wAAAAc"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:53:20.219692 2026] [security2:error] [pid 1960664:tid 1960664] [client 159.65.70.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlkb9Lbd4zJn3wkh3d10wAAAAc"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 12:53:48.650505 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkjLQytPl9f6K_EmrI4AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:53:48.650605 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkjLQytPl9f6K_EmrI4AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:54:02.644667 2026] [security2:error] [pid 1992003:tid 1992003] [client 87.238.192.52:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlkmRB7zWRWEp-p13p1qQAAAAU"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 12:54:02.644768 2026] [security2:error] [pid 1992003:tid 1992003] [client 87.238.192.52:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZlkmRB7zWRWEp-p13p1qQAAAAU"], referer: https://asalinnovations.com/wp-login.php [Sat Feb 21 12:54:04.413147 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlknPkdT_IobDccX58TogAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic [Sat Feb 21 12:54:04.413551 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlknPkdT_IobDccX58TogAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic [Sat Feb 21 12:54:08.253848 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:54:48.208313 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkyBHl2U-jS0ZSEvYP2QAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:54:48.208450 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkyBHl2U-jS0ZSEvYP2QAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:54:48.697622 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkyNLbd4zJn3wkh3d2BgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:54:48.697779 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlkyNLbd4zJn3wkh3d2BgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 12:55:07.346896 2026] [security2:error] [pid 1949603:tid 1949603] [client 91.92.242.178:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlk2enNlyfrsrZbi4_stQAAAAQ"] [Sat Feb 21 12:55:07.346968 2026] [security2:error] [pid 1949603:tid 1949603] [client 91.92.242.178:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlk2enNlyfrsrZbi4_stQAAAAQ"] [Sat Feb 21 12:55:07.507392 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk27QytPl9f6K_EmrJEAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda [Sat Feb 21 12:55:07.507470 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk27QytPl9f6K_EmrJEAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda [Sat Feb 21 12:55:13.970071 2026] [security2:error] [pid 1991125:tid 1991125] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk4b0Jce5K4Dp0-DZpFgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 12:55:13.970185 2026] [security2:error] [pid 1991125:tid 1991125] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk4b0Jce5K4Dp0-DZpFgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 12:55:15.510239 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk41d6fqP3Bq8xHbOPPAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 12:55:15.510333 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk41d6fqP3Bq8xHbOPPAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 12:55:22.790472 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk6ld6fqP3Bq8xHbOPRwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi [Sat Feb 21 12:55:22.790555 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk6ld6fqP3Bq8xHbOPRwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi [Sat Feb 21 12:55:25.632631 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk7enNlyfrsrZbi4_syQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fpower [Sat Feb 21 12:55:25.632716 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlk7enNlyfrsrZbi4_syQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fpower [Sat Feb 21 12:55:36.497453 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:55:36.516718 2026] [access_compat:error] [pid 1991125:tid 1991125] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:55:40.490712 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 91.92.242.178:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-content/uploads/wpcf7_uploads/ [Sat Feb 21 12:56:04.324383 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 12:56:10.765923 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 12:56:10.766052 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 12:56:10.766111 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 12:56:10.766833 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 12:56:10.766944 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 12:56:10.767001 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 12:56:10.767584 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 12:56:10.767625 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 12:56:10.767671 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 12:56:10.767709 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 12:56:10.767739 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 12:56:10.767767 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 12:56:10.767787 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 12:56:10.767832 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 12:56:10.767875 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 12:56:10.767922 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 12:56:10.789625 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 12:56:10.789720 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 12:56:10.789748 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 12:56:10.789795 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 12:56:10.789833 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 12:56:10.789869 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 12:56:10.789911 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 12:56:10.789994 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 12:56:10.790014 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 12:56:10.790042 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 12:56:10.790070 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 12:56:10.790129 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 12:56:10.790158 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 12:56:15.197599 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.197663 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.429265 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.429394 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.660271 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.660403 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.975441 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:15.975505 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.257474 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.257581 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.490473 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.490519 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.722085 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.722140 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.951739 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:16.951780 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.199726 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.200514 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.444557 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.444655 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.675445 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.675530 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.905676 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:17.905724 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.137729 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.137805 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.387215 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.387261 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.647420 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.647508 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.877556 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:18.877617 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.106640 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.106704 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.338431 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.342359 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.588898 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.588962 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.854403 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.854470 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:19.993595 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllIxHl2U-jS0ZSEvYQGQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 12:56:19.993683 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllIxHl2U-jS0ZSEvYQGQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 12:56:20.103554 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.103644 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.335438 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.335499 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.735838 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.735884 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.965067 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:20.965147 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.194828 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.194881 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.424965 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.425046 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.654922 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.654978 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.892099 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:21.892149 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.122586 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.122649 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.352783 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.352863 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.602072 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.602119 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.831975 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:22.832053 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.071339 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.071415 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.309007 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.309064 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.545277 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.545357 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.846520 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.846579 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:23.847008 2026] [security2:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-global": Permission denied [hostname "www.home.akcpa.sa"] [uri "/home/akcpa/public_html/server.php"] [unique_id "aZllJxHl2U-jS0ZSEvYQHQAAAAM"] [Sat Feb 21 12:56:23.847035 2026] [security2:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-ip": Permission denied [hostname "www.home.akcpa.sa"] [uri "/home/akcpa/public_html/server.php"] [unique_id "aZllJxHl2U-jS0ZSEvYQHQAAAAM"] [Sat Feb 21 12:56:24.079716 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.079784 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.309557 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.309641 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.562715 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.562806 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.816796 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:24.816855 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.071626 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.071680 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.306533 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.306582 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.550703 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.550762 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.787540 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:25.787606 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.017919 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.017974 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.248835 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.248934 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.487937 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.487999 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.779069 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:26.779151 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.010421 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.010498 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.347946 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.348011 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.581764 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.581832 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.810855 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:27.810891 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.041635 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.041695 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.272073 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.272141 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.569781 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.569881 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.806816 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:28.806864 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.040855 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.040920 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.274820 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.274898 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.505303 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.505407 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.761985 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.762311 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.999638 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:29.999709 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.231223 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.231305 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.464667 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.464735 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.694215 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.694261 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.924344 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:30.924446 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.224108 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.224156 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.459315 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.459414 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.690499 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.690569 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.940704 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:31.940757 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.171053 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.171152 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.401431 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.401490 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.689125 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.689200 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.919588 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:32.919654 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.158929 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.158982 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.388099 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.388148 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.617984 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.618046 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.857621 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:33.857701 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.086877 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.086939 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.329437 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.329507 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.560382 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.560447 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.789525 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:34.789576 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.019322 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.019395 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.252330 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.252597 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.527078 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.527146 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.763485 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.763648 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.993602 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:35.993641 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.198204 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllNLQytPl9f6K_EmrJUgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:56:36.198295 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllNLQytPl9f6K_EmrJUgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:56:36.222803 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.222847 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.453370 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.453452 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.690234 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.690296 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.921990 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:36.922054 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.152040 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.152109 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.385387 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.385445 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.616041 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.616100 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.868679 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:37.868731 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.111483 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.111530 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.341427 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.341496 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.578600 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.578657 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.809471 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:38.809543 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.038890 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.038955 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.271179 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.271245 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.502299 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.502380 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.731401 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.731458 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.961334 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:39.961412 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.201529 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.201593 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.480497 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.480546 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.709523 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.709565 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.965652 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:40.965714 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.212069 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.212116 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.237027 2026] [security2:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllOdLbd4zJn3wkh3d2VAAAAAc"] [Sat Feb 21 12:56:41.237122 2026] [security2:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllOdLbd4zJn3wkh3d2VAAAAAc"] [Sat Feb 21 12:56:41.443866 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.443920 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.675240 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.675303 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.904994 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:41.905049 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.139733 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.139805 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.372407 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.372459 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.603176 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.603226 2026] [core:error] [pid 1926602:tid 1926602] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.874866 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:42.874917 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.104794 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.104874 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.335237 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.335297 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.576417 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.576483 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.749674 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:56:43.814521 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:43.814561 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.043417 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.043462 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.320022 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.320170 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.555010 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.555063 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.786735 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:44.786808 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.016281 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.016326 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.251804 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.251869 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.480907 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.480991 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.713869 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.713936 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.955101 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:45.955169 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.215594 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.215683 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.447459 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.447552 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.690835 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.690890 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.938839 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:46.938886 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.169412 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.169478 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.398287 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.398338 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.631010 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.631090 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.865184 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:47.865291 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.107397 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.107448 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.337764 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.337831 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.568304 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.568396 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.799145 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:48.799215 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.032073 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.032136 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.268089 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.268157 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.498172 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.498230 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.741578 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.741641 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.972349 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:49.972435 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:50.207791 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:50.207875 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:50.438700 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:50.438763 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:50.676351 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:50.676428 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.042365 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.042432 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.275107 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.275177 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.510261 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.510324 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.747729 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.747804 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.977724 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:51.977790 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.207155 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.207211 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.444667 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.444763 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.674888 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.674963 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.904135 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:52.904179 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.136007 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.136069 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.371686 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.371761 2026] [core:error] [pid 1994661:tid 1994661] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.616579 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.616627 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.848874 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:53.848957 2026] [core:error] [pid 1949603:tid 1949603] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.111364 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.111514 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.341516 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.341573 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.582477 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.582522 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.812471 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:54.812528 2026] [core:error] [pid 1988869:tid 1988869] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.056232 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.056319 2026] [core:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.057015 2026] [security2:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-global": Permission denied [hostname "www.home.akcpa.sa"] [uri "/home/akcpa/public_html/server.php"] [unique_id "aZllR9Lbd4zJn3wkh3d2ZAAAAAc"] [Sat Feb 21 12:56:55.057056 2026] [security2:error] [pid 1960664:tid 1960664] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-ip": Permission denied [hostname "www.home.akcpa.sa"] [uri "/home/akcpa/public_html/server.php"] [unique_id "aZllR9Lbd4zJn3wkh3d2ZAAAAAc"] [Sat Feb 21 12:56:55.287207 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.287318 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.517947 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.518036 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.751528 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.751618 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.981695 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:55.981776 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.215246 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.215334 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.462525 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.462593 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.697553 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.697634 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.927274 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:56.927321 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.168320 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.168419 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.398492 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.398529 2026] [core:error] [pid 1956767:tid 1956767] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.630158 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.630204 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.860627 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:57.860691 2026] [core:error] [pid 1992003:tid 1992003] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:58.090220 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:58.090273 2026] [core:error] [pid 1985129:tid 1985129] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:58.340043 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:58.340096 2026] [core:error] [pid 1985392:tid 1985392] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:58.592914 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:56:58.593012 2026] [core:error] [pid 1975250:tid 1975250] [client 104.46.236.39:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 12:57:14.514655 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllWvkdT_IobDccX58UKAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 12:57:14.514716 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllWvkdT_IobDccX58UKAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 12:57:16.793489 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 12:57:16.793581 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 12:57:16.793612 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 12:57:16.793783 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 12:57:16.793828 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 12:57:16.793855 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 12:57:16.793989 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 12:57:16.794083 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 12:57:16.794136 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 12:57:16.794172 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 12:57:16.794207 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 12:57:16.794245 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 12:57:16.794276 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 12:57:16.794307 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 12:57:16.794341 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 12:57:16.794375 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 12:57:16.794726 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 12:57:16.794780 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 12:57:16.794820 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 12:57:16.794879 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 12:57:16.794918 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 12:57:16.794957 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 12:57:16.794996 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 12:57:16.795038 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 12:57:16.795074 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 12:57:16.795113 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 12:57:16.795168 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 12:57:16.795280 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 12:57:16.795321 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 12:57:26.715126 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllZhB7zWRWEp-p13p2OwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 12:57:26.715188 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllZhB7zWRWEp-p13p2OwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 12:57:37.955046 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 12:57:37.955129 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 12:57:37.955156 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 12:57:37.955282 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 12:57:37.955311 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 12:57:37.955333 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 12:57:37.955504 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 12:57:37.955535 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 12:57:37.955561 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 12:57:37.955581 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 12:57:37.955603 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 12:57:37.955626 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 12:57:37.955647 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 12:57:37.955667 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 12:57:37.955690 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 12:57:37.955712 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 12:57:37.955899 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 12:57:37.955934 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 12:57:37.955958 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 12:57:37.955982 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 12:57:37.956004 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 12:57:37.956028 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 12:57:37.956052 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 12:57:37.956076 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 12:57:37.956099 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 12:57:37.956140 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 12:57:37.956160 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 12:57:37.956219 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 12:57:37.956245 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 12:57:41.708557 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlldenNlyfrsrZbi4_tKwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:57:41.708645 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlldenNlyfrsrZbi4_tKwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 12:57:52.763354 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:58:25.415184 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllofkdT_IobDccX58UTQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:58:25.415267 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllofkdT_IobDccX58UTQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 12:58:31.071919 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllpgucuRjmpRitlBtJQgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric [Sat Feb 21 12:58:31.071980 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllpgucuRjmpRitlBtJQgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric [Sat Feb 21 12:58:51.879351 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllu-nNlyfrsrZbi4_tTAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 12:58:51.879433 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZllu-nNlyfrsrZbi4_tTAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 12:58:52.639848 2026] [security2:error] [pid 1956767:tid 1956767] [client 40.112.95.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-global": Permission denied [hostname "mastercomm.net.pk"] [uri "/wp-su.php"] [unique_id "aZllvLQytPl9f6K_EmrJpQAAAAE"] [Sat Feb 21 12:58:52.639917 2026] [security2:error] [pid 1956767:tid 1956767] [client 40.112.95.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-ip": Permission denied [hostname "mastercomm.net.pk"] [uri "/wp-su.php"] [unique_id "aZllvLQytPl9f6K_EmrJpQAAAAE"] [Sat Feb 21 12:58:54.549159 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 12:58:54.549242 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 12:58:54.549263 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 12:58:54.549431 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 12:58:54.549469 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 12:58:54.549488 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 12:58:54.549583 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 12:58:54.549601 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 12:58:54.549754 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 12:58:54.549784 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 12:58:54.549841 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 12:58:54.549870 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 12:58:54.549896 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 12:58:54.549936 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 12:58:54.549964 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 12:58:54.549992 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 12:58:54.550244 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 12:58:54.550281 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 12:58:54.550318 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 12:58:54.550346 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 12:58:54.550373 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 12:58:54.550401 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 12:58:54.550430 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 12:58:54.550467 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 12:58:54.550503 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 12:58:54.550531 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 12:58:54.550584 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 12:58:54.550665 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 12:58:54.550696 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 12:58:59.726611 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 12:58:59.726717 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 12:58:59.726750 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 12:58:59.726903 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 12:58:59.726966 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 12:58:59.727029 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 12:58:59.727261 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 12:58:59.727295 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 12:58:59.727322 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 12:58:59.727346 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 12:58:59.727372 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 12:58:59.727398 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 12:58:59.727421 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 12:58:59.727446 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 12:58:59.727472 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 12:58:59.727498 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 12:58:59.727717 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 12:58:59.727752 2026] [authz_core:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 12:58:59.727778 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 12:58:59.727805 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 12:58:59.727857 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 12:58:59.727883 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 12:58:59.727910 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 12:58:59.727935 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 12:58:59.727958 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 12:58:59.727983 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 12:58:59.728004 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 12:58:59.728062 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 12:58:59.728103 2026] [access_compat:error] [pid 1985392:tid 1985392] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 12:59:01.759833 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 12:59:48.406213 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZll9PkdT_IobDccX58UeAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 12:59:48.406333 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZll9PkdT_IobDccX58UeAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:00:42.637558 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmKunNlyfrsrZbi4_tggAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 13:00:42.637702 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmKunNlyfrsrZbi4_tggAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 13:00:55.035330 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:01:05.257436 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmQS3-_6b3eKRK8zI3KAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:01:05.257539 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmQS3-_6b3eKRK8zI3KAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:01:22.299872 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmUgucuRjmpRitlBtJlQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:01:22.299961 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmUgucuRjmpRitlBtJlQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:01:56.163064 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmdLQytPl9f6K_EmrJ-wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 13:01:56.163198 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmdLQytPl9f6K_EmrJ-wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 13:02:04.682201 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:02:43.924689 2026] [security2:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZlmo-nNlyfrsrZbi4_ttgAAAAQ"] [Sat Feb 21 13:02:43.924795 2026] [security2:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZlmo-nNlyfrsrZbi4_ttgAAAAQ"] [Sat Feb 21 13:03:00.712894 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmtFd6fqP3Bq8xHbOQPAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:03:00.712999 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlmtFd6fqP3Bq8xHbOQPAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:03:06.582174 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:03:28.848368 2026] [security2:error] [pid 1985129:tid 1985129] [client 20.194.25.241:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-global": Permission denied [hostname "demo.redpenguinit.com"] [uri "/class-t.api.php"] [unique_id "aZlm0PkdT_IobDccX58U3gAAAAI"] [Sat Feb 21 13:03:28.848455 2026] [security2:error] [pid 1985129:tid 1985129] [client 20.194.25.241:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-ip": Permission denied [hostname "demo.redpenguinit.com"] [uri "/class-t.api.php"] [unique_id "aZlm0PkdT_IobDccX58U3gAAAAI"] [Sat Feb 21 13:03:34.684053 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm1rQytPl9f6K_EmrKMwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:03:34.684175 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm1rQytPl9f6K_EmrKMwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:03:44.673446 2026] [security2:error] [pid 1956767:tid 1956767] [client 51.75.151.149:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-content/plugins/cidaas-pro-master/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "science-on-stage.sk"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZlm4LQytPl9f6K_EmrKOwAAAAE"] [Sat Feb 21 13:03:46.475295 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm4unNlyfrsrZbi4_t4AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 13:03:46.475410 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm4unNlyfrsrZbi4_t4AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 13:04:12.169343 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm_LQytPl9f6K_EmrKSwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:04:12.169409 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm_LQytPl9f6K_EmrKSwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:04:12.726744 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm_Fd6fqP3Bq8xHbOQaQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 13:04:12.726884 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlm_Fd6fqP3Bq8xHbOQaQAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 13:04:30.729815 2026] [cgi:error] [pid 1975250:tid 1975250] [client 40.115.138.121:0] AH02812: stderr from /home/scienceonstage/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 13:04:35.964152 2026] [authz_core:error] [pid 1992003:tid 1992003] [client 40.115.138.121:0] AH01630: client denied by server configuration: /home/scienceonstage/public_html/wp-content/uploads/wpcf7_uploads/ [Sat Feb 21 13:04:35.968003 2026] [access_compat:error] [pid 1992003:tid 1992003] [client 40.115.138.121:0] AH01797: client denied by server configuration: /home/scienceonstage/public_html/wp-content/uploads/wpcf7_captcha/ [Sat Feb 21 13:05:34.163457 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnTrQytPl9f6K_EmrKcgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:05:34.163552 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnTrQytPl9f6K_EmrKcgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:05:52.133161 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnYLQytPl9f6K_EmrKegAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fbdi [Sat Feb 21 13:05:52.133260 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnYLQytPl9f6K_EmrKegAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fbdi [Sat Feb 21 13:06:01.662044 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnaS3-_6b3eKRK8zI3vwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:06:01.662160 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnaS3-_6b3eKRK8zI3vwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:06:22.816625 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:06:39.520883 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnjwucuRjmpRitlBtKMQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:06:39.520944 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnjwucuRjmpRitlBtKMQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:07:19.015443 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnti3-_6b3eKRK8zI34AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:07:19.015510 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlnti3-_6b3eKRK8zI34AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:07:58.576921 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZln3rQytPl9f6K_EmrKrwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:07:58.577099 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZln3rQytPl9f6K_EmrKrwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:08:13.426057 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:08:26.326497 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZln-i3-_6b3eKRK8zI3_gAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 13:08:26.326664 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZln-i3-_6b3eKRK8zI3_gAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 13:08:40.541708 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloCPkdT_IobDccX58VcQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:08:40.541779 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloCPkdT_IobDccX58VcQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:09:06.713388 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloIld6fqP3Bq8xHbOQ6wAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:09:06.713557 2026] [security2:error] [pid 1975250:tid 1975250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloIld6fqP3Bq8xHbOQ6wAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:09:07.476465 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloI_kdT_IobDccX58VfQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:09:07.476595 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloI_kdT_IobDccX58VfQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:09:13.146320 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloKbQytPl9f6K_EmrKzAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:09:13.146398 2026] [security2:error] [pid 1956767:tid 1956767] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloKbQytPl9f6K_EmrKzAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:09:23.531488 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloMxHl2U-jS0ZSEvYRmwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:09:23.531633 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloMxHl2U-jS0ZSEvYRmwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:09:25.426624 2026] [access_compat:error] [pid 1975250:tid 1975250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:09:35.329383 2026] [security2:error] [pid 1985129:tid 1985129] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/app/config/parameters.yml"] [unique_id "aZloP_kdT_IobDccX58ViwAAAAI"], referer: http://des-pvt.com/ [Sat Feb 21 13:09:35.790537 2026] [security2:error] [pid 1960664:tid 1960664] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-config.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.env-config.js"] [unique_id "aZloP9Lbd4zJn3wkh3d32QAAAAc"], referer: http://des-pvt.com/ [Sat Feb 21 13:09:35.905596 2026] [security2:error] [pid 1985392:tid 1985392] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.env.js"] [unique_id "aZloPy3-_6b3eKRK8zI4HgAAAAk"], referer: http://des-pvt.com/ [Sat Feb 21 13:09:37.125200 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloQRB7zWRWEp-p13p3nwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:09:37.125361 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZloQRB7zWRWEp-p13p3nwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:09:39.708453 2026] [security2:error] [pid 1992003:tid 1992003] [client 176.65.132.217:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/config/parameters.yml"] [unique_id "aZloQxB7zWRWEp-p13p3ogAAAAU"], referer: http://des-pvt.com/ [Sat Feb 21 13:09:45.205615 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:09:47.091640 2026] [security2:error] [pid 1992003:tid 1992003] [client 167.71.15.42:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZloShB7zWRWEp-p13p3pgAAAAU"] [Sat Feb 21 13:09:47.091771 2026] [security2:error] [pid 1992003:tid 1992003] [client 167.71.15.42:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZloShB7zWRWEp-p13p3pgAAAAU"] [Sat Feb 21 13:09:58.506204 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 40.69.66.178:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sm.php [Sat Feb 21 13:09:58.611854 2026] [access_compat:error] [pid 2001387:tid 2001387] [client 40.69.66.178:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sc.php [Sat Feb 21 13:11:08.580071 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlonBB7zWRWEp-p13p3zgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 13:11:08.580171 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlonBB7zWRWEp-p13p3zgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 13:11:26.761566 2026] [security2:error] [pid 1994661:tid 1994661] [client 20.210.88.198:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "social.247reactionpower.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aZlorohPsHRVAc81jVCJyAAAAAY"] [Sat Feb 21 13:11:26.761665 2026] [security2:error] [pid 1994661:tid 1994661] [client 20.210.88.198:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "social.247reactionpower.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aZlorohPsHRVAc81jVCJyAAAAAY"] [Sat Feb 21 13:11:53.921321 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.bak"] [unique_id "aZloydLbd4zJn3wkh3d4JAAAAAc"] [Sat Feb 21 13:11:53.938696 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env"] [unique_id "aZloyenNlyfrsrZbi4_uxgAAAAQ"] [Sat Feb 21 13:11:53.955532 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.backup"] [unique_id "aZloyS3-_6b3eKRK8zI4agAAAAk"] [Sat Feb 21 13:11:53.973775 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_sample"] [unique_id "aZloyTUKi5B2GfZ3HRGCjgAAAAg"] [Sat Feb 21 13:11:53.990855 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.old"] [unique_id "aZloyYhPsHRVAc81jVCJ2QAAAAY"] [Sat Feb 21 13:11:54.008647 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.www"] [unique_id "aZloyvkdT_IobDccX58V0QAAAAI"] [Sat Feb 21 13:11:54.025065 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.docker/.env"] [unique_id "aZloygucuRjmpRitlBtKxwAAAAA"] [Sat Feb 21 13:11:54.043329 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.dev"] [unique_id "aZloyhB7zWRWEp-p13p36QAAAAU"] [Sat Feb 21 13:11:54.061974 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.example"] [unique_id "aZloyrQytPl9f6K_EmrLJAAAAAE"] [Sat Feb 21 13:11:54.079586 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_1"] [unique_id "aZloytLbd4zJn3wkh3d4JQAAAAc"] [Sat Feb 21 13:11:54.096951 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.stage"] [unique_id "aZloyunNlyfrsrZbi4_uxwAAAAQ"] [Sat Feb 21 13:11:54.148526 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.environment"] [unique_id "aZloyohPsHRVAc81jVCJ2gAAAAY"] [Sat Feb 21 13:11:54.166383 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.production"] [unique_id "aZloyvkdT_IobDccX58V0gAAAAI"] [Sat Feb 21 13:11:54.183624 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.production.local"] [unique_id "aZloygucuRjmpRitlBtKyAAAAAA"] [Sat Feb 21 13:11:54.253184 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.envs"] [unique_id "aZloyunNlyfrsrZbi4_uyAAAAAQ"] [Sat Feb 21 13:11:54.271408 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.docker"] [unique_id "aZloyhHl2U-jS0ZSEvYR7QAAAAM"] [Sat Feb 21 13:11:54.290093 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.sample"] [unique_id "aZloyjUKi5B2GfZ3HRGCkAAAAAg"] [Sat Feb 21 13:11:54.307938 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_bak"] [unique_id "aZloyohPsHRVAc81jVCJ2wAAAAY"] [Sat Feb 21 13:11:54.325870 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.php"] [unique_id "aZloyvkdT_IobDccX58V0wAAAAI"] [Sat Feb 21 13:11:54.343947 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.development.local"] [unique_id "aZloygucuRjmpRitlBtKyQAAAAA"] [Sat Feb 21 13:11:54.361737 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env-example"] [unique_id "aZloyhB7zWRWEp-p13p36wAAAAU"] [Sat Feb 21 13:11:54.378964 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.prod"] [unique_id "aZloyrQytPl9f6K_EmrLJgAAAAE"] [Sat Feb 21 13:11:54.395326 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.docker.dev"] [unique_id "aZloytLbd4zJn3wkh3d4JwAAAAc"] [Sat Feb 21 13:11:54.412126 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.test"] [unique_id "aZloyunNlyfrsrZbi4_uyQAAAAQ"] [Sat Feb 21 13:11:54.590679 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.dev.local"] [unique_id "aZloyhHl2U-jS0ZSEvYR7wAAAAM"] [Sat Feb 21 13:11:54.626944 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_old"] [unique_id "aZloyohPsHRVAc81jVCJ3QAAAAY"] [Sat Feb 21 13:11:54.661622 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.development.sample"] [unique_id "aZloygucuRjmpRitlBtKywAAAAA"] [Sat Feb 21 13:11:54.696095 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env-sample"] [unique_id "aZloyrQytPl9f6K_EmrLKAAAAAE"] [Sat Feb 21 13:11:54.713730 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.prod.local"] [unique_id "aZloyi3-_6b3eKRK8zI4bgAAAAk"] [Sat Feb 21 13:11:54.730561 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.travis"] [unique_id "aZloyunNlyfrsrZbi4_uywAAAAQ"] [Sat Feb 21 13:11:54.747568 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.test.sample"] [unique_id "aZloyhHl2U-jS0ZSEvYR8AAAAAM"] [Sat Feb 21 13:11:54.765981 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.2"] [unique_id "aZloyjUKi5B2GfZ3HRGCkwAAAAg"] [Sat Feb 21 13:11:54.783558 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.vscode/.env"] [unique_id "aZloyohPsHRVAc81jVCJ3gAAAAY"] [Sat Feb 21 13:11:54.800674 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.local"] [unique_id "aZloyvkdT_IobDccX58V1gAAAAI"] [Sat Feb 21 13:11:54.817403 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.txt"] [unique_id "aZloygucuRjmpRitlBtKzAAAAAA"] [Sat Feb 21 13:11:54.835305 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.save"] [unique_id "aZloytLbd4zJn3wkh3d4KQAAAAc"] [Sat Feb 21 13:11:54.888756 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.test.local"] [unique_id "aZloyunNlyfrsrZbi4_uzAAAAAQ"] [Sat Feb 21 13:11:54.923696 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.envrc"] [unique_id "aZloyjUKi5B2GfZ3HRGClAAAAAg"] [Sat Feb 21 13:11:54.940363 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.dist"] [unique_id "aZloyohPsHRVAc81jVCJ3wAAAAY"] [Sat Feb 21 13:11:54.958573 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.sample.php"] [unique_id "aZloyvkdT_IobDccX58V1wAAAAI"] [Sat Feb 21 13:11:54.975887 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env1"] [unique_id "aZloygucuRjmpRitlBtKzQAAAAA"] [Sat Feb 21 13:11:55.047806 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/env.bak"] [unique_id "aZloy-nNlyfrsrZbi4_uzQAAAAQ"] [Sat Feb 21 13:11:55.104250 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "tech2tech.gr"] [uri "/pms"] [unique_id "aZloyxB7zWRWEp-p13p37wAAAAU"] [Sat Feb 21 13:11:55.104407 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "tech2tech.gr"] [uri "/pms"] [unique_id "aZloyxB7zWRWEp-p13p37wAAAAU"] [Sat Feb 21 13:11:55.104477 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "tech2tech.gr"] [uri "/pms"] [unique_id "aZloyxB7zWRWEp-p13p37wAAAAU"] [Sat Feb 21 13:11:55.125610 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /k8s/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/k8s/.env"] [unique_id "aZloy_kdT_IobDccX58V2AAAAAI"] [Sat Feb 21 13:11:55.143364 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/config/.env"] [unique_id "aZloywucuRjmpRitlBtKzgAAAAA"] [Sat Feb 21 13:11:55.161204 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/.env"] [unique_id "aZloy9Lbd4zJn3wkh3d4KwAAAAc"] [Sat Feb 21 13:11:55.178360 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/.env"] [unique_id "aZloy7QytPl9f6K_EmrLKwAAAAE"] [Sat Feb 21 13:11:55.197581 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/backend/.env"] [unique_id "aZloyy3-_6b3eKRK8zI4cQAAAAk"] [Sat Feb 21 13:11:55.215705 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/.env"] [unique_id "aZloy-nNlyfrsrZbi4_uzgAAAAQ"] [Sat Feb 21 13:11:55.233811 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/admin/.env"] [unique_id "aZloyxHl2U-jS0ZSEvYR8wAAAAM"] [Sat Feb 21 13:11:55.251417 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/public/.env"] [unique_id "aZloy4hPsHRVAc81jVCJ4QAAAAY"] [Sat Feb 21 13:11:55.268396 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/web/.env"] [unique_id "aZloyxB7zWRWEp-p13p38AAAAAU"] [Sat Feb 21 13:11:55.285321 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/server/.env"] [unique_id "aZloyzUKi5B2GfZ3HRGClgAAAAg"] [Sat Feb 21 13:11:55.356924 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/client/.env"] [unique_id "aZloy_kdT_IobDccX58V2QAAAAI"] [Sat Feb 21 13:11:55.375218 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/frontend/.env"] [unique_id "aZloy9Lbd4zJn3wkh3d4LAAAAAc"] [Sat Feb 21 13:11:55.394989 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.development"] [unique_id "aZloy-nNlyfrsrZbi4_uzwAAAAQ"] [Sat Feb 21 13:11:55.413561 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.staging"] [unique_id "aZloy7QytPl9f6K_EmrLLAAAAAE"] [Sat Feb 21 13:11:55.439823 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.live"] [unique_id "aZloyy3-_6b3eKRK8zI4cgAAAAk"] [Sat Feb 21 13:11:55.659028 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php"] [unique_id "aZloywucuRjmpRitlBtK0AAAAAA"] [Sat Feb 21 13:11:55.879888 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/private/.env"] [unique_id "aZloy-nNlyfrsrZbi4_u0gAAAAQ"] [Sat Feb 21 13:11:55.898259 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/backup/.env"] [unique_id "aZloy7QytPl9f6K_EmrLLwAAAAE"] [Sat Feb 21 13:11:55.916496 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/.env"] [unique_id "aZloyy3-_6b3eKRK8zI4dQAAAAk"] [Sat Feb 21 13:11:55.936240 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dev/.env"] [unique_id "aZloy4hPsHRVAc81jVCJ5QAAAAY"] [Sat Feb 21 13:11:55.964261 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/staging/.env"] [unique_id "aZloyxHl2U-jS0ZSEvYR9wAAAAM"] [Sat Feb 21 13:11:55.983286 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/production/.env"] [unique_id "aZloyzUKi5B2GfZ3HRGCmgAAAAg"] [Sat Feb 21 13:11:56.001616 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/.env"] [unique_id "aZloywucuRjmpRitlBtK0gAAAAA"] [Sat Feb 21 13:11:56.203675 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/administrator/.env"] [unique_id "aZlozDcQ3FFpkVv1wBBhAgAAAAo"] [Sat Feb 21 13:11:56.220631 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cms/.env"] [unique_id "aZlozOnNlyfrsrZbi4_u1AAAAAQ"] [Sat Feb 21 13:11:56.238006 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/portal/.env"] [unique_id "aZlozLQytPl9f6K_EmrLMQAAAAE"] [Sat Feb 21 13:11:56.255564 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dashboard/.env"] [unique_id "aZlozIhPsHRVAc81jVCJ5wAAAAY"] [Sat Feb 21 13:11:56.273380 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/crm/.env"] [unique_id "aZlozBHl2U-jS0ZSEvYR-QAAAAM"] [Sat Feb 21 13:11:56.291266 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mail/.env"] [unique_id "aZlozDUKi5B2GfZ3HRGCnAAAAAg"] [Sat Feb 21 13:11:56.309115 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mailer/.env"] [unique_id "aZlozAucuRjmpRitlBtK1AAAAAA"] [Sat Feb 21 13:11:56.326853 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/deployment/.env"] [unique_id "aZlozPkdT_IobDccX58V3wAAAAI"] [Sat Feb 21 13:11:56.345304 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/.env"] [unique_id "aZlozBB7zWRWEp-p13p39QAAAAU"] [Sat Feb 21 13:11:56.366436 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/helm/.env"] [unique_id "aZlozC3-_6b3eKRK8zI4dwAAAAk"] [Sat Feb 21 13:11:56.383621 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/terraform/.env"] [unique_id "aZlozDcQ3FFpkVv1wBBhAwAAAAo"] [Sat Feb 21 13:11:56.400513 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ansible/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ansible/.env"] [unique_id "aZlozOnNlyfrsrZbi4_u1QAAAAQ"] [Sat Feb 21 13:11:56.495893 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:11:56.543556 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_example"] [unique_id "aZlozC3-_6b3eKRK8zI4eAAAAAk"] [Sat Feb 21 13:11:56.565004 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/core/.env"] [unique_id "aZlozDcQ3FFpkVv1wBBhBAAAAAo"] [Sat Feb 21 13:11:56.652729 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/local/.env"] [unique_id "aZlozBHl2U-jS0ZSEvYR-wAAAAM"] [Sat Feb 21 13:11:56.678114 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/application/.env"] [unique_id "aZlozPkdT_IobDccX58V4QAAAAI"] [Sat Feb 21 13:11:56.736681 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/config/settings.ini"] [unique_id "aZlozDcQ3FFpkVv1wBBhBQAAAAo"] [Sat Feb 21 13:11:56.755784 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/env/.env"] [unique_id "aZlozIhPsHRVAc81jVCJ6QAAAAY"] [Sat Feb 21 13:11:56.775825 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/new/.env"] [unique_id "aZlozOnNlyfrsrZbi4_u1wAAAAQ"] [Sat Feb 21 13:11:56.821921 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/new/.env.local"] [unique_id "aZlozLQytPl9f6K_EmrLNAAAAAE"] [Sat Feb 21 13:11:56.840214 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/new/.env.production"] [unique_id "aZlozBHl2U-jS0ZSEvYR_AAAAAM"] [Sat Feb 21 13:11:56.866860 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/new/.env.staging"] [unique_id "aZlozPkdT_IobDccX58V4gAAAAI"] [Sat Feb 21 13:11:56.985039 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/awstats/.env"] [unique_id "aZlozLQytPl9f6K_EmrLNQAAAAE"] [Sat Feb 21 13:11:57.003065 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/conf/.env"] [unique_id "aZlozRHl2U-jS0ZSEvYR_QAAAAM"] [Sat Feb 21 13:11:57.023153 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cron/.env"] [unique_id "aZlozfkdT_IobDccX58V4wAAAAI"] [Sat Feb 21 13:11:57.047917 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/www/.env"] [unique_id "aZlozRB7zWRWEp-p13p3-QAAAAU"] [Sat Feb 21 13:11:57.077704 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/app/.env"] [unique_id "aZlozS3-_6b3eKRK8zI4ewAAAAk"] [Sat Feb 21 13:11:57.101509 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/env.backup"] [unique_id "aZlozTcQ3FFpkVv1wBBhBwAAAAo"] [Sat Feb 21 13:11:57.190824 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/js/.env"] [unique_id "aZlozYhPsHRVAc81jVCJ6wAAAAY"] [Sat Feb 21 13:11:57.207820 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/core/.env"] [unique_id "aZlozRB7zWRWEp-p13p3-gAAAAU"] [Sat Feb 21 13:11:57.225656 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/nginx/.env"] [unique_id "aZlozS3-_6b3eKRK8zI4fAAAAAk"] [Sat Feb 21 13:11:57.244492 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/site/.env"] [unique_id "aZlozTcQ3FFpkVv1wBBhCAAAAAo"] [Sat Feb 21 13:11:57.286789 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/xampp/.env"] [unique_id "aZlozTUKi5B2GfZ3HRGCoQAAAAg"] [Sat Feb 21 13:11:57.308792 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.docker/laravel/app/.env"] [unique_id "aZlozenNlyfrsrZbi4_u2gAAAAQ"] [Sat Feb 21 13:11:57.336923 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/.env.local"] [unique_id "aZlozRHl2U-jS0ZSEvYR_wAAAAM"] [Sat Feb 21 13:11:57.355208 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/.env.production"] [unique_id "aZlozfkdT_IobDccX58V5QAAAAI"] [Sat Feb 21 13:11:57.390145 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/.env.staging"] [unique_id "aZlozYhPsHRVAc81jVCJ7AAAAAY"] [Sat Feb 21 13:11:57.415665 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/core/.env.local"] [unique_id "aZlozRB7zWRWEp-p13p3-wAAAAU"] [Sat Feb 21 13:11:57.441844 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/core/.env.production"] [unique_id "aZlozS3-_6b3eKRK8zI4fQAAAAk"] [Sat Feb 21 13:11:57.442574 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/laravel/core/.env.production"] [unique_id "aZlozS3-_6b3eKRK8zI4fQAAAAk"] [Sat Feb 21 13:11:57.442603 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/laravel/core/.env.production"] [unique_id "aZlozS3-_6b3eKRK8zI4fQAAAAk"] [Sat Feb 21 13:11:57.459651 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/laravel/core/.env.staging"] [unique_id "aZlozbQytPl9f6K_EmrLNwAAAAE"] [Sat Feb 21 13:11:57.489632 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/main/.env"] [unique_id "aZlozTcQ3FFpkVv1wBBhCQAAAAo"] [Sat Feb 21 13:11:57.530448 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/app/private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/storage/app/private/.env"] [unique_id "aZlozRHl2U-jS0ZSEvYSAAAAAAM"] [Sat Feb 21 13:11:57.564257 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/storage/logs/laravel.log"] [unique_id "aZlozfkdT_IobDccX58V5gAAAAI"] [Sat Feb 21 13:11:57.588073 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/composer.lock"] [unique_id "aZlozYhPsHRVAc81jVCJ7QAAAAY"] [Sat Feb 21 13:11:57.631295 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/server.key"] [unique_id "aZlozdLbd4zJn3wkh3d4LgAAAAc"] [Sat Feb 21 13:11:57.674768 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/php5.ini"] [unique_id "aZlozS3-_6b3eKRK8zI4fgAAAAk"] [Sat Feb 21 13:11:57.795955 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php.bak"] [unique_id "aZlozRB7zWRWEp-p13p3_QAAAAU"] [Sat Feb 21 13:11:57.830099 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php.backup"] [unique_id "aZlozbQytPl9f6K_EmrLOQAAAAE"] [Sat Feb 21 13:11:57.880567 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/config.ini"] [unique_id "aZlozfkdT_IobDccX58V6AAAAAI"] [Sat Feb 21 13:11:57.914189 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/.aws/credentials.bak"] [unique_id "aZlozYhPsHRVAc81jVCJ7wAAAAY"] [Sat Feb 21 13:11:57.931232 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/credentials/admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.aws/credentials/admin/.env"] [unique_id "aZlozTUKi5B2GfZ3HRGCpAAAAAg"] [Sat Feb 21 13:11:57.967217 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/.bak"] [unique_id "aZlozS3-_6b3eKRK8zI4gAAAAAk"] [Sat Feb 21 13:11:58.001513 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.bitbucket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.bitbucket/.env"] [unique_id "aZlozrQytPl9f6K_EmrLOgAAAAE"] [Sat Feb 21 13:11:58.053700 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.c9/metadata/environment/.env"] [unique_id "aZlozvkdT_IobDccX58V6QAAAAI"] [Sat Feb 21 13:11:58.072465 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.circleci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.circleci/.env"] [unique_id "aZlozhHl2U-jS0ZSEvYSAwAAAAM"] [Sat Feb 21 13:11:58.124138 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env-db"] [unique_id "aZloztLbd4zJn3wkh3d4MQAAAAc"] [Sat Feb 21 13:11:58.141106 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.back"] [unique_id "aZlozi3-_6b3eKRK8zI4gQAAAAk"] [Sat Feb 21 13:11:58.158801 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bkp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.bkp"] [unique_id "aZlozunNlyfrsrZbi4_u3gAAAAQ"] [Sat Feb 21 13:11:58.176562 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.credentials"] [unique_id "aZlozrQytPl9f6K_EmrLOwAAAAE"] [Sat Feb 21 13:11:58.195381 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.email"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.email"] [unique_id "aZlozjcQ3FFpkVv1wBBhDQAAAAo"] [Sat Feb 21 13:11:58.213555 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hidden"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.hidden"] [unique_id "aZlozgucuRjmpRitlBtK2AAAAAA"] [Sat Feb 21 13:11:58.230794 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hide"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.hide"] [unique_id "aZlozhB7zWRWEp-p13p3_wAAAAU"] [Sat Feb 21 13:11:58.248843 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.js"] [unique_id "aZlozhHl2U-jS0ZSEvYSBAAAAAM"] [Sat Feb 21 13:11:58.267093 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.key"] [unique_id "aZlozohPsHRVAc81jVCJ8QAAAAY"] [Sat Feb 21 13:11:58.284904 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.mail"] [unique_id "aZlozjUKi5B2GfZ3HRGCpgAAAAg"] [Sat Feb 21 13:11:58.301487 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.smtp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.smtp"] [unique_id "aZloztLbd4zJn3wkh3d4MgAAAAc"] [Sat Feb 21 13:11:58.318375 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.swp"] [unique_id "aZlozi3-_6b3eKRK8zI4ggAAAAk"] [Sat Feb 21 13:11:58.342802 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.testing"] [unique_id "aZlozunNlyfrsrZbi4_u3wAAAAQ"] [Sat Feb 21 13:11:58.355936 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:11:58.361110 2026] [security2:error] [pid 1956767:tid 1956767] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.uat"] [unique_id "aZlozrQytPl9f6K_EmrLPAAAAAE"] [Sat Feb 21 13:11:58.377690 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_aws"] [unique_id "aZlozjcQ3FFpkVv1wBBhDgAAAAo"] [Sat Feb 21 13:11:58.394280 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_backup"] [unique_id "aZlozgucuRjmpRitlBtK2QAAAAA"] [Sat Feb 21 13:11:58.411252 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_copy"] [unique_id "aZlozhB7zWRWEp-p13p4AAAAAAU"] [Sat Feb 21 13:11:58.428771 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_private"] [unique_id "aZlozhHl2U-jS0ZSEvYSBQAAAAM"] [Sat Feb 21 13:11:58.446583 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env_secret"] [unique_id "aZlozohPsHRVAc81jVCJ8gAAAAY"] [Sat Feb 21 13:11:58.464399 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env~"] [unique_id "aZlozjUKi5B2GfZ3HRGCpwAAAAg"] [Sat Feb 21 13:11:58.481731 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.git/"] [unique_id "aZloztLbd4zJn3wkh3d4MwAAAAc"] [Sat Feb 21 13:11:58.498961 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.git/config"] [unique_id "aZlozi3-_6b3eKRK8zI4gwAAAAk"] [Sat Feb 21 13:11:58.516163 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.github/.env"] [unique_id "aZlozunNlyfrsrZbi4_u4AAAAAQ"] [Sat Feb 21 13:11:58.551574 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.gitignore"] [unique_id "aZlozgucuRjmpRitlBtK2gAAAAA"] [Sat Feb 21 13:11:58.587276 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.gitlab-ci/.env"] [unique_id "aZlozhHl2U-jS0ZSEvYSBgAAAAM"] [Sat Feb 21 13:11:58.603262 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.gitlab/.env"] [unique_id "aZlozohPsHRVAc81jVCJ8wAAAAY"] [Sat Feb 21 13:11:58.619822 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.hg/"] [unique_id "aZlozjUKi5B2GfZ3HRGCqAAAAAg"] [Sat Feb 21 13:11:58.650918 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.idea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.idea/.env"] [unique_id "aZloztLbd4zJn3wkh3d4NAAAAAc"] [Sat Feb 21 13:11:58.863074 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.svn/"] [unique_id "aZlozjcQ3FFpkVv1wBBhEQAAAAo"] [Sat Feb 21 13:11:58.970177 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aZloztLbd4zJn3wkh3d4NgAAAAc"] [Sat Feb 21 13:11:58.988835 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "aZlozi3-_6b3eKRK8zI4hgAAAAk"] [Sat Feb 21 13:11:59.005906 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "aZloz-nNlyfrsrZbi4_u4wAAAAQ"] [Sat Feb 21 13:11:59.023404 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "aZlozzcQ3FFpkVv1wBBhEgAAAAo"] [Sat Feb 21 13:11:59.040316 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "aZlozwucuRjmpRitlBtK3QAAAAA"] [Sat Feb 21 13:11:59.057683 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "aZlozxB7zWRWEp-p13p4BAAAAAU"] [Sat Feb 21 13:11:59.094819 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/3-sequelize/final/.env"] [unique_id "aZloz_kdT_IobDccX58V7gAAAAI"] [Sat Feb 21 13:11:59.113106 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/31_structure_tests/.env"] [unique_id "aZlozzUKi5B2GfZ3HRGCqwAAAAg"] [Sat Feb 21 13:11:59.280921 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /__tests__/test-become/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/__tests__/test-become/.env"] [unique_id "aZloz9Lbd4zJn3wkh3d4OAAAAAc"] [Sat Feb 21 13:11:59.540574 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/_static/.env"] [unique_id "aZlozzUKi5B2GfZ3HRGCrQAAAAg"] [Sat Feb 21 13:11:59.576960 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/acme-challenge/.env"] [unique_id "aZloz_kdT_IobDccX58V8QAAAAI"] [Sat Feb 21 13:11:59.594976 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/acme/.env"] [unique_id "aZloz9Lbd4zJn3wkh3d4OgAAAAc"] [Sat Feb 21 13:11:59.613951 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/acme_challenges/.env"] [unique_id "aZlozy3-_6b3eKRK8zI4igAAAAk"] [Sat Feb 21 13:11:59.631855 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/actions-server/.env"] [unique_id "aZloz-nNlyfrsrZbi4_u5wAAAAQ"] [Sat Feb 21 13:11:59.685188 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/admin-app/.env"] [unique_id "aZloz4hPsHRVAc81jVCJ-gAAAAY"] [Sat Feb 21 13:11:59.704227 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/admin-panel/.env"] [unique_id "aZlozzUKi5B2GfZ3HRGCrgAAAAg"] [Sat Feb 21 13:11:59.772919 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/adminapp/.env"] [unique_id "aZlozy3-_6b3eKRK8zI4iwAAAAk"] [Sat Feb 21 13:11:59.808483 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/adminer/.env"] [unique_id "aZlozzcQ3FFpkVv1wBBhFwAAAAo"] [Sat Feb 21 13:11:59.862233 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/agora/.env"] [unique_id "aZlozzUKi5B2GfZ3HRGCrwAAAAg"] [Sat Feb 21 13:11:59.880015 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/alpha/.env"] [unique_id "aZlozxHl2U-jS0ZSEvYSDQAAAAM"] [Sat Feb 21 13:11:59.898240 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/anaconda/.env"] [unique_id "aZloz_kdT_IobDccX58V8wAAAAI"] [Sat Feb 21 13:12:00.020114 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api-server/.env"] [unique_id "aZlo0DUKi5B2GfZ3HRGCsAAAAAg"] [Sat Feb 21 13:12:00.037112 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/.env.back"] [unique_id "aZlo0BHl2U-jS0ZSEvYSDgAAAAM"] [Sat Feb 21 13:12:00.054979 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/.env.example"] [unique_id "aZlo0PkdT_IobDccX58V9AAAAAI"] [Sat Feb 21 13:12:00.072742 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/.env.sample"] [unique_id "aZlo0NLbd4zJn3wkh3d4PQAAAAc"] [Sat Feb 21 13:12:00.090405 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/.env.save"] [unique_id "aZlo0C3-_6b3eKRK8zI4jQAAAAk"] [Sat Feb 21 13:12:00.236197 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/src/.env"] [unique_id "aZlo0NLbd4zJn3wkh3d4PgAAAAc"] [Sat Feb 21 13:12:00.254347 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/v1/.env"] [unique_id "aZlo0C3-_6b3eKRK8zI4jgAAAAk"] [Sat Feb 21 13:12:00.290046 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/v2/.env"] [unique_id "aZlo0DcQ3FFpkVv1wBBhGgAAAAo"] [Sat Feb 21 13:12:00.307615 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/apis/.env"] [unique_id "aZlo0AucuRjmpRitlBtK5QAAAAA"] [Sat Feb 21 13:12:00.343466 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app-order-client/.env"] [unique_id "aZlo0DUKi5B2GfZ3HRGCsgAAAAg"] [Sat Feb 21 13:12:00.380450 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/.env.example"] [unique_id "aZlo0PkdT_IobDccX58V9gAAAAI"] [Sat Feb 21 13:12:00.398908 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/.env.sample"] [unique_id "aZlo0NLbd4zJn3wkh3d4PwAAAAc"] [Sat Feb 21 13:12:00.416746 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/.env.save"] [unique_id "aZlo0C3-_6b3eKRK8zI4jwAAAAk"] [Sat Feb 21 13:12:00.435633 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/.env.back"] [unique_id "aZlo0OnNlyfrsrZbi4_u7AAAAAQ"] [Sat Feb 21 13:12:00.455633 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/client/.env"] [unique_id "aZlo0DcQ3FFpkVv1wBBhGwAAAAo"] [Sat Feb 21 13:12:00.477153 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "aZlo0AucuRjmpRitlBtK5gAAAAA"] [Sat Feb 21 13:12:00.515724 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/config/.env"] [unique_id "aZlo0DUKi5B2GfZ3HRGCswAAAAg"] [Sat Feb 21 13:12:00.535541 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/config/dev/.env"] [unique_id "aZlo0BHl2U-jS0ZSEvYSEQAAAAM"] [Sat Feb 21 13:12:00.556072 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/frontend/.env"] [unique_id "aZlo0PkdT_IobDccX58V9wAAAAI"] [Sat Feb 21 13:12:00.614361 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app1-static/.env"] [unique_id "aZlo0OnNlyfrsrZbi4_u7QAAAAQ"] [Sat Feb 21 13:12:00.632262 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app2-static/.env"] [unique_id "aZlo0DcQ3FFpkVv1wBBhHAAAAAo"] [Sat Feb 21 13:12:00.652680 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app_dir/.env"] [unique_id "aZlo0AucuRjmpRitlBtK5wAAAAA"] [Sat Feb 21 13:12:00.672227 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app_nginx_static_path/.env"] [unique_id "aZlo0BB7zWRWEp-p13p4DAAAAAU"] [Sat Feb 21 13:12:00.689680 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/application/.env.sample"] [unique_id "aZlo0DUKi5B2GfZ3HRGCtAAAAAg"] [Sat Feb 21 13:12:00.707258 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/application/.env.save"] [unique_id "aZlo0BHl2U-jS0ZSEvYSEgAAAAM"] [Sat Feb 21 13:12:00.726029 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/apps/.env"] [unique_id "aZlo0PkdT_IobDccX58V-AAAAAI"] [Sat Feb 21 13:12:00.745262 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/apps/client/.env"] [unique_id "aZlo0NLbd4zJn3wkh3d4QQAAAAc"] [Sat Feb 21 13:12:00.764835 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Archipel/.env"] [unique_id "aZlo0IhPsHRVAc81jVCKAAAAAAY"] [Sat Feb 21 13:12:00.799974 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/asset_img/.env"] [unique_id "aZlo0DcQ3FFpkVv1wBBhHQAAAAo"] [Sat Feb 21 13:12:00.817030 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/assets/.env"] [unique_id "aZlo0AucuRjmpRitlBtK6AAAAAA"] [Sat Feb 21 13:12:00.835839 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/assets/index-[hash].js"] [unique_id "aZlo0DUKi5B2GfZ3HRGCtQAAAAg"] [Sat Feb 21 13:12:00.835896 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/assets/index-[hash].js"] [unique_id "aZlo0DUKi5B2GfZ3HRGCtQAAAAg"] [Sat Feb 21 13:12:00.942724 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Assignment3/.env"] [unique_id "aZlo0DcQ3FFpkVv1wBBhHgAAAAo"] [Sat Feb 21 13:12:00.959394 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Assignment4/.env"] [unique_id "aZlo0AucuRjmpRitlBtK6QAAAAA"] [Sat Feb 21 13:12:00.976084 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/audio/.env"] [unique_id "aZlo0DUKi5B2GfZ3HRGCtgAAAAg"] [Sat Feb 21 13:12:01.027459 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/aws/.env"] [unique_id "aZlo0fkdT_IobDccX58V-gAAAAI"] [Sat Feb 21 13:12:01.044117 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /azure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/azure/.env"] [unique_id "aZlo0dLbd4zJn3wkh3d4QwAAAAc"] [Sat Feb 21 13:12:01.061629 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "aZlo0YhPsHRVAc81jVCKAgAAAAY"] [Sat Feb 21 13:12:01.078924 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "aZlo0RB7zWRWEp-p13p4DgAAAAU"] [Sat Feb 21 13:12:01.097518 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "aZlo0enNlyfrsrZbi4_u8AAAAAQ"] [Sat Feb 21 13:12:01.115828 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "aZlo0QucuRjmpRitlBtK6gAAAAA"] [Sat Feb 21 13:12:01.133203 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "aZlo0TUKi5B2GfZ3HRGCtwAAAAg"] [Sat Feb 21 13:12:01.152630 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "aZlo0S3-_6b3eKRK8zI4kwAAAAk"] [Sat Feb 21 13:12:01.170529 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "aZlo0RHl2U-jS0ZSEvYSFQAAAAM"] [Sat Feb 21 13:12:01.188299 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/back-end/app/.env"] [unique_id "aZlo0fkdT_IobDccX58V-wAAAAI"] [Sat Feb 21 13:12:01.205073 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/back/.env"] [unique_id "aZlo0dLbd4zJn3wkh3d4RAAAAAc"] [Sat Feb 21 13:12:01.222329 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/backend/.env.local"] [unique_id "aZlo0YhPsHRVAc81jVCKAwAAAAY"] [Sat Feb 21 13:12:01.238859 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/backend/config/.env"] [unique_id "aZlo0RB7zWRWEp-p13p4DwAAAAU"] [Sat Feb 21 13:12:01.274188 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/backend/src/.env"] [unique_id "aZlo0QucuRjmpRitlBtK6wAAAAA"] [Sat Feb 21 13:12:01.291168 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/backendfinaltest/.env"] [unique_id "aZlo0TUKi5B2GfZ3HRGCuAAAAAg"] [Sat Feb 21 13:12:01.342273 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/base_dir/.env"] [unique_id "aZlo0fkdT_IobDccX58V_AAAAAI"] [Sat Feb 21 13:12:01.360489 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/basic-network/.env"] [unique_id "aZlo0TcQ3FFpkVv1wBBhIAAAAAo"] [Sat Feb 21 13:12:01.379256 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/bgoldd/.env"] [unique_id "aZlo0YhPsHRVAc81jVCKBAAAAAY"] [Sat Feb 21 13:12:01.396702 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/bitcoind/.env"] [unique_id "aZlo0RB7zWRWEp-p13p4EAAAAAU"] [Sat Feb 21 13:12:01.414683 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/blankon/.env"] [unique_id "aZlo0enNlyfrsrZbi4_u8gAAAAQ"] [Sat Feb 21 13:12:01.432858 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/blob/.env"] [unique_id "aZlo0QucuRjmpRitlBtK7AAAAAA"] [Sat Feb 21 13:12:01.450185 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/blog/.env"] [unique_id "aZlo0TUKi5B2GfZ3HRGCuQAAAAg"] [Sat Feb 21 13:12:01.469119 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blogs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/blogs/.env"] [unique_id "aZlo0S3-_6b3eKRK8zI4lQAAAAk"] [Sat Feb 21 13:12:01.489516 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/blue/.env"] [unique_id "aZlo0RHl2U-jS0ZSEvYSFwAAAAM"] [Sat Feb 21 13:12:01.532383 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/bookchain-client/.env"] [unique_id "aZlo0fkdT_IobDccX58V_QAAAAI"] [Sat Feb 21 13:12:01.955050 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/bootstrap/.env"] [unique_id "aZlo0enNlyfrsrZbi4_u8wAAAAQ"] [Sat Feb 21 13:12:01.996410 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "aZlo0QucuRjmpRitlBtK7QAAAAA"] [Sat Feb 21 13:12:02.024993 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "aZlo0jUKi5B2GfZ3HRGCugAAAAg"] [Sat Feb 21 13:12:02.051454 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "aZlo0i3-_6b3eKRK8zI4lgAAAAk"] [Sat Feb 21 13:12:02.074486 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/bucoffea/.env"] [unique_id "aZlo0tLbd4zJn3wkh3d4RgAAAAc"] [Sat Feb 21 13:12:02.138719 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/build/.env"] [unique_id "aZlo0jcQ3FFpkVv1wBBhIgAAAAo"] [Sat Feb 21 13:12:02.272531 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cardea/backend/.env"] [unique_id "aZlo0hHl2U-jS0ZSEvYSGQAAAAM"] [Sat Feb 21 13:12:02.292487 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cdw-backend/.env"] [unique_id "aZlo0vkdT_IobDccX58V_wAAAAI"] [Sat Feb 21 13:12:02.310346 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cgi-bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cgi-bin/.env"] [unique_id "aZlo0ohPsHRVAc81jVCKBgAAAAY"] [Sat Feb 21 13:12:02.310757 2026] [cgi:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] AH02811: stderr from /home/tech2tech/public_html/cgi-bin/.env: script not found or unable to stat [Sat Feb 21 13:12:02.328589 2026] [cgi:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] AH02811: stderr from /home/tech2tech/public_html/cgi-bin/pass.txt: script not found or unable to stat [Sat Feb 21 13:12:02.347935 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch2-mytodo/.env"] [unique_id "aZlo0unNlyfrsrZbi4_u9QAAAAQ"] [Sat Feb 21 13:12:02.364862 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch6-mytodo/.env"] [unique_id "aZlo0gucuRjmpRitlBtK7wAAAAA"] [Sat Feb 21 13:12:02.381498 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch6a-mytodo/.env"] [unique_id "aZlo0i3-_6b3eKRK8zI4mAAAAAk"] [Sat Feb 21 13:12:02.400878 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch7-mytodo/.env"] [unique_id "aZlo0hB7zWRWEp-p13p4EwAAAAU"] [Sat Feb 21 13:12:02.418606 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch7a-mytodo/.env"] [unique_id "aZlo0hHl2U-jS0ZSEvYSGgAAAAM"] [Sat Feb 21 13:12:02.435948 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch8-mytodo/.env"] [unique_id "aZlo0vkdT_IobDccX58WAAAAAAI"] [Sat Feb 21 13:12:02.454661 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch8a-mytodo/.env"] [unique_id "aZlo0ohPsHRVAc81jVCKBwAAAAY"] [Sat Feb 21 13:12:02.471648 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ch8b-mytodo/.env"] [unique_id "aZlo0jcQ3FFpkVv1wBBhJAAAAAo"] [Sat Feb 21 13:12:02.489825 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Chai/.env"] [unique_id "aZlo0gucuRjmpRitlBtK8AAAAAA"] [Sat Feb 21 13:12:02.507515 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/challenge/.env"] [unique_id "aZlo0jUKi5B2GfZ3HRGCvQAAAAg"] [Sat Feb 21 13:12:02.524339 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/challenges/.env"] [unique_id "aZlo0i3-_6b3eKRK8zI4mQAAAAk"] [Sat Feb 21 13:12:02.541867 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/charts/liveObjects/.env"] [unique_id "aZlo0hB7zWRWEp-p13p4FAAAAAU"] [Sat Feb 21 13:12:02.559821 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/chat-client/.env"] [unique_id "aZlo0hHl2U-jS0ZSEvYSGwAAAAM"] [Sat Feb 21 13:12:02.577920 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/chiminey/.env"] [unique_id "aZlo0vkdT_IobDccX58WAQAAAAI"] [Sat Feb 21 13:12:02.615425 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ci/.env"] [unique_id "aZlo0tLbd4zJn3wkh3d4SQAAAAc"] [Sat Feb 21 13:12:02.634819 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/client-app/.env"] [unique_id "aZlo0jcQ3FFpkVv1wBBhJQAAAAo"] [Sat Feb 21 13:12:02.653592 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/client/mutual-fund-app/.env"] [unique_id "aZlo0gucuRjmpRitlBtK8QAAAAA"] [Sat Feb 21 13:12:02.673360 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/client/src/.env"] [unique_id "aZlo0jUKi5B2GfZ3HRGCvgAAAAg"] [Sat Feb 21 13:12:02.691228 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ClientApp/.env"] [unique_id "aZlo0hB7zWRWEp-p13p4FQAAAAU"] [Sat Feb 21 13:12:02.708199 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/clld_dir/.env"] [unique_id "aZlo0hHl2U-jS0ZSEvYSHAAAAAM"] [Sat Feb 21 13:12:02.724748 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cloud/.env"] [unique_id "aZlo0vkdT_IobDccX58WAgAAAAI"] [Sat Feb 21 13:12:02.743248 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aZlo0ohPsHRVAc81jVCKCQAAAAY"] [Sat Feb 21 13:12:02.762674 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/code/api/.env"] [unique_id "aZlo0unNlyfrsrZbi4_u9wAAAAQ"] [Sat Feb 21 13:12:02.781292 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/code/web/.env"] [unique_id "aZlo0tLbd4zJn3wkh3d4SgAAAAc"] [Sat Feb 21 13:12:02.798026 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "aZlo0jcQ3FFpkVv1wBBhJgAAAAo"] [Sat Feb 21 13:12:02.818025 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/codenames-frontend/.env"] [unique_id "aZlo0gucuRjmpRitlBtK8gAAAAA"] [Sat Feb 21 13:12:02.836773 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/collab-connect-web-application/server/.env"] [unique_id "aZlo0jUKi5B2GfZ3HRGCvwAAAAg"] [Sat Feb 21 13:12:02.854951 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/collected_static/.env"] [unique_id "aZlo0i3-_6b3eKRK8zI4mwAAAAk"] [Sat Feb 21 13:12:02.873637 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/community/.env"] [unique_id "aZlo0hB7zWRWEp-p13p4FgAAAAU"] [Sat Feb 21 13:12:02.891549 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/compose/.env"] [unique_id "aZlo0hHl2U-jS0ZSEvYSHQAAAAM"] [Sat Feb 21 13:12:02.947811 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/config/.env.dev"] [unique_id "aZlo0unNlyfrsrZbi4_u-AAAAAQ"] [Sat Feb 21 13:12:02.969334 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/config/.env.local"] [unique_id "aZlo0jcQ3FFpkVv1wBBhJwAAAAo"] [Sat Feb 21 13:12:02.987027 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/config/.env.production"] [unique_id "aZlo0gucuRjmpRitlBtK8wAAAAA"] [Sat Feb 21 13:12:03.061456 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/config/config.yml"] [unique_id "aZlo0_kdT_IobDccX58WBAAAAAI"] [Sat Feb 21 13:12:03.179723 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ContainerRegistry/.env"] [unique_id "aZlo0y3-_6b3eKRK8zI4nQAAAAk"] [Sat Feb 21 13:12:03.198525 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/containers/.env"] [unique_id "aZlo0xHl2U-jS0ZSEvYSHwAAAAM"] [Sat Feb 21 13:12:03.218198 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/content/.env"] [unique_id "aZlo0_kdT_IobDccX58WBQAAAAI"] [Sat Feb 21 13:12:03.237501 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/control/.env"] [unique_id "aZlo09Lbd4zJn3wkh3d4TAAAAAc"] [Sat Feb 21 13:12:03.257188 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/core/app/.env"] [unique_id "aZlo04hPsHRVAc81jVCKDAAAAAY"] [Sat Feb 21 13:12:03.275256 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/core/Datavase/.env"] [unique_id "aZlo0-nNlyfrsrZbi4_u-gAAAAQ"] [Sat Feb 21 13:12:03.293116 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/core/persistence/.env"] [unique_id "aZlo0zcQ3FFpkVv1wBBhKQAAAAo"] [Sat Feb 21 13:12:03.311753 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "aZlo0xB7zWRWEp-p13p4GAAAAAU"] [Sat Feb 21 13:12:03.328494 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/counterblockd/.env"] [unique_id "aZlo0wucuRjmpRitlBtK9QAAAAA"] [Sat Feb 21 13:12:03.346652 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/counterwallet/.env"] [unique_id "aZlo0zUKi5B2GfZ3HRGCwgAAAAg"] [Sat Feb 21 13:12:03.365857 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cp/.env"] [unique_id "aZlo0y3-_6b3eKRK8zI4ngAAAAk"] [Sat Feb 21 13:12:03.385053 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cronlab/.env"] [unique_id "aZlo0xHl2U-jS0ZSEvYSIAAAAAM"] [Sat Feb 21 13:12:03.403033 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/cryo_project/.env"] [unique_id "aZlo0_kdT_IobDccX58WBgAAAAI"] [Sat Feb 21 13:12:03.422766 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/css/.env"] [unique_id "aZlo04hPsHRVAc81jVCKDQAAAAY"] [Sat Feb 21 13:12:03.442097 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/custom/.env"] [unique_id "aZlo0-nNlyfrsrZbi4_u-wAAAAQ"] [Sat Feb 21 13:12:03.460079 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/d/.env"] [unique_id "aZlo0zcQ3FFpkVv1wBBhKgAAAAo"] [Sat Feb 21 13:12:03.549127 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/data/.env"] [unique_id "aZlo09Lbd4zJn3wkh3d4TgAAAAc"] [Sat Feb 21 13:12:03.570553 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/database/.env"] [unique_id "aZlo04hPsHRVAc81jVCKDgAAAAY"] [Sat Feb 21 13:12:03.591352 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dataset1/.env"] [unique_id "aZlo0-nNlyfrsrZbi4_u_AAAAAQ"] [Sat Feb 21 13:12:03.609090 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dataset2/.env"] [unique_id "aZlo0zcQ3FFpkVv1wBBhKwAAAAo"] [Sat Feb 21 13:12:03.663053 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/db.sql"] [unique_id "aZlo0_kdT_IobDccX58WCAAAAAI"] [Sat Feb 21 13:12:03.682834 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/db_backup.sql"] [unique_id "aZlo09Lbd4zJn3wkh3d4TwAAAAc"] [Sat Feb 21 13:12:03.738751 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/debug.log"] [unique_id "aZlo0-nNlyfrsrZbi4_u_QAAAAQ"] [Sat Feb 21 13:12:03.827164 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/default/.env"] [unique_id "aZlo0y3-_6b3eKRK8zI4oQAAAAk"] [Sat Feb 21 13:12:03.844663 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/delivery/.env"] [unique_id "aZlo0_kdT_IobDccX58WCQAAAAI"] [Sat Feb 21 13:12:03.863171 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/demo-app/.env"] [unique_id "aZlo09Lbd4zJn3wkh3d4UAAAAAc"] [Sat Feb 21 13:12:03.883222 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/demo/.env"] [unique_id "aZlo04hPsHRVAc81jVCKEAAAAAY"] [Sat Feb 21 13:12:03.939089 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/deploy/.env"] [unique_id "aZlo0zcQ3FFpkVv1wBBhLQAAAAo"] [Sat Feb 21 13:12:03.995218 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dev-env/.env"] [unique_id "aZlo0y3-_6b3eKRK8zI4ogAAAAk"] [Sat Feb 21 13:12:04.014952 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/dev.php"] [unique_id "aZlo1PkdT_IobDccX58WCgAAAAI"] [Sat Feb 21 13:12:04.015004 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/dev.php"] [unique_id "aZlo1PkdT_IobDccX58WCgAAAAI"] [Sat Feb 21 13:12:04.032105 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dev/.env.local"] [unique_id "aZlo1NLbd4zJn3wkh3d4UQAAAAc"] [Sat Feb 21 13:12:04.050577 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dev_env/.env"] [unique_id "aZlo1BB7zWRWEp-p13p4HAAAAAU"] [Sat Feb 21 13:12:04.089339 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/developer/.env"] [unique_id "aZlo1DcQ3FFpkVv1wBBhLgAAAAo"] [Sat Feb 21 13:12:04.109321 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/developerslv/.env"] [unique_id "aZlo1AucuRjmpRitlBtK-gAAAAA"] [Sat Feb 21 13:12:04.127831 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/development/.env"] [unique_id "aZlo1DUKi5B2GfZ3HRGCxwAAAAg"] [Sat Feb 21 13:12:04.188772 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/directories/.env"] [unique_id "aZlo1NLbd4zJn3wkh3d4UgAAAAc"] [Sat Feb 21 13:12:04.207782 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dist/.env"] [unique_id "aZlo1BB7zWRWEp-p13p4HQAAAAU"] [Sat Feb 21 13:12:04.244583 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/django-blog/.env"] [unique_id "aZlo1OnNlyfrsrZbi4_vAAAAAAQ"] [Sat Feb 21 13:12:04.263818 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/django/.env"] [unique_id "aZlo1DcQ3FFpkVv1wBBhLwAAAAo"] [Sat Feb 21 13:12:04.285122 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/django_project_path/.env"] [unique_id "aZlo1AucuRjmpRitlBtK-wAAAAA"] [Sat Feb 21 13:12:04.302550 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/doc/.env"] [unique_id "aZlo1DUKi5B2GfZ3HRGCyAAAAAg"] [Sat Feb 21 13:12:04.337934 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker-compose/.env"] [unique_id "aZlo1C3-_6b3eKRK8zI4pAAAAAk"] [Sat Feb 21 13:12:04.357325 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker-compose/platform/.env"] [unique_id "aZlo1PkdT_IobDccX58WDAAAAAI"] [Sat Feb 21 13:12:04.375027 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker-elk/.env"] [unique_id "aZlo1NLbd4zJn3wkh3d4UwAAAAc"] [Sat Feb 21 13:12:04.394843 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker-network-healthcheck/.env"] [unique_id "aZlo1BB7zWRWEp-p13p4HgAAAAU"] [Sat Feb 21 13:12:04.413350 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker-node-mongo-redis/.env"] [unique_id "aZlo1BHl2U-jS0ZSEvYSJQAAAAM"] [Sat Feb 21 13:12:04.430965 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/compose/withMongo/.env"] [unique_id "aZlo1OnNlyfrsrZbi4_vAQAAAAQ"] [Sat Feb 21 13:12:04.450578 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/compose/withPostgres/.env"] [unique_id "aZlo1DcQ3FFpkVv1wBBhMAAAAAo"] [Sat Feb 21 13:12:04.471173 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/database/.env"] [unique_id "aZlo1AucuRjmpRitlBtK_AAAAAA"] [Sat Feb 21 13:12:04.488213 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/db/.env"] [unique_id "aZlo1DUKi5B2GfZ3HRGCyQAAAAg"] [Sat Feb 21 13:12:04.506705 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/dev/.env"] [unique_id "aZlo1C3-_6b3eKRK8zI4pQAAAAk"] [Sat Feb 21 13:12:04.525511 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/examples/compose/.env"] [unique_id "aZlo1PkdT_IobDccX58WDQAAAAI"] [Sat Feb 21 13:12:04.543687 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/postgres/.env"] [unique_id "aZlo1NLbd4zJn3wkh3d4VAAAAAc"] [Sat Feb 21 13:12:04.563353 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docker/webdav/.env"] [unique_id "aZlo1BHl2U-jS0ZSEvYSJgAAAAM"] [Sat Feb 21 13:12:04.581178 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/docs/.env"] [unique_id "aZlo1OnNlyfrsrZbi4_vAgAAAAQ"] [Sat Feb 21 13:12:04.600043 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dodoswap-client/.env"] [unique_id "aZlo1DcQ3FFpkVv1wBBhMQAAAAo"] [Sat Feb 21 13:12:04.618287 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/dotfiles/.env"] [unique_id "aZlo1AucuRjmpRitlBtK_QAAAAA"] [Sat Feb 21 13:12:04.637160 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /download/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/download/.env"] [unique_id "aZlo1DUKi5B2GfZ3HRGCygAAAAg"] [Sat Feb 21 13:12:04.656454 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/downloads/.env"] [unique_id "aZlo1C3-_6b3eKRK8zI4pgAAAAk"] [Sat Feb 21 13:12:04.675241 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/drupal/.env"] [unique_id "aZlo1PkdT_IobDccX58WDgAAAAI"] [Sat Feb 21 13:12:04.692349 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/dump.sql"] [unique_id "aZlo1NLbd4zJn3wkh3d4VQAAAAc"] [Sat Feb 21 13:12:04.693498 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/dump.sql"] [unique_id "aZlo1NLbd4zJn3wkh3d4VQAAAAc"] [Sat Feb 21 13:12:04.693540 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/dump.sql"] [unique_id "aZlo1NLbd4zJn3wkh3d4VQAAAAc"] [Sat Feb 21 13:12:04.711313 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/e2e/.env"] [unique_id "aZlo1BHl2U-jS0ZSEvYSJwAAAAM"] [Sat Feb 21 13:12:04.728843 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/en/.env"] [unique_id "aZlo1OnNlyfrsrZbi4_vAwAAAAQ"] [Sat Feb 21 13:12:04.746700 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /engine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/engine/.env"] [unique_id "aZlo1DcQ3FFpkVv1wBBhMgAAAAo"] [Sat Feb 21 13:12:04.821699 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "aZlo1C3-_6b3eKRK8zI4pwAAAAk"] [Sat Feb 21 13:12:04.839507 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/env/dockers/php-apache/.env"] [unique_id "aZlo1BB7zWRWEp-p13p4IAAAAAU"] [Sat Feb 21 13:12:04.859869 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/env/example/.env"] [unique_id "aZlo1PkdT_IobDccX58WDwAAAAI"] [Sat Feb 21 13:12:04.879610 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/env/template/.env"] [unique_id "aZlo1NLbd4zJn3wkh3d4VgAAAAc"] [Sat Feb 21 13:12:04.897783 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/environments/local/.env"] [unique_id "aZlo1BHl2U-jS0ZSEvYSKAAAAAM"] [Sat Feb 21 13:12:04.916123 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/environments/production/.env"] [unique_id "aZlo1OnNlyfrsrZbi4_vBAAAAAQ"] [Sat Feb 21 13:12:04.934695 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /envs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/envs/.env"] [unique_id "aZlo1DcQ3FFpkVv1wBBhMwAAAAo"] [Sat Feb 21 13:12:04.952344 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/error.log"] [unique_id "aZlo1IhPsHRVAc81jVCKFQAAAAY"] [Sat Feb 21 13:12:04.971135 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/error/.env"] [unique_id "aZlo1AucuRjmpRitlBtK_wAAAAA"] [Sat Feb 21 13:12:04.989530 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/errors/.env"] [unique_id "aZlo1DUKi5B2GfZ3HRGCzAAAAAg"] [Sat Feb 21 13:12:05.008726 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/example/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4qAAAAAk"] [Sat Feb 21 13:12:05.027104 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "aZlo1RB7zWRWEp-p13p4IQAAAAU"] [Sat Feb 21 13:12:05.045360 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "aZlo1fkdT_IobDccX58WEAAAAAI"] [Sat Feb 21 13:12:05.064250 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "aZlo1dLbd4zJn3wkh3d4VwAAAAc"] [Sat Feb 21 13:12:05.081855 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vBQAAAAQ"] [Sat Feb 21 13:12:05.099572 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/01-simple-model/.env"] [unique_id "aZlo1TcQ3FFpkVv1wBBhNAAAAAo"] [Sat Feb 21 13:12:05.117599 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/02-complex-example/.env"] [unique_id "aZlo1YhPsHRVAc81jVCKFgAAAAY"] [Sat Feb 21 13:12:05.136000 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "aZlo1QucuRjmpRitlBtLAAAAAAA"] [Sat Feb 21 13:12:05.155001 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4qQAAAAk"] [Sat Feb 21 13:12:05.173160 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/05-migrations/.env"] [unique_id "aZlo1RB7zWRWEp-p13p4IgAAAAU"] [Sat Feb 21 13:12:05.193388 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/06-base-service/.env"] [unique_id "aZlo1fkdT_IobDccX58WEQAAAAI"] [Sat Feb 21 13:12:05.211226 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/07-feature-flags/.env"] [unique_id "aZlo1dLbd4zJn3wkh3d4WAAAAAc"] [Sat Feb 21 13:12:05.228729 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/08-performance/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vBgAAAAQ"] [Sat Feb 21 13:12:05.250713 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/09-production/.env"] [unique_id "aZlo1TcQ3FFpkVv1wBBhNQAAAAo"] [Sat Feb 21 13:12:05.270388 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/10-subscriptions/.env"] [unique_id "aZlo1YhPsHRVAc81jVCKFwAAAAY"] [Sat Feb 21 13:12:05.288354 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/11-transactions/.env"] [unique_id "aZlo1QucuRjmpRitlBtLAQAAAAA"] [Sat Feb 21 13:12:05.306258 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/drupal-separate-services/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4qgAAAAk"] [Sat Feb 21 13:12:05.322955 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "aZlo1RHl2U-jS0ZSEvYSKgAAAAM"] [Sat Feb 21 13:12:05.340018 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/sdl-first/.env"] [unique_id "aZlo1RB7zWRWEp-p13p4IwAAAAU"] [Sat Feb 21 13:12:05.357809 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "aZlo1fkdT_IobDccX58WEgAAAAI"] [Sat Feb 21 13:12:05.376446 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "aZlo1dLbd4zJn3wkh3d4WQAAAAc"] [Sat Feb 21 13:12:05.394424 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/web/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vBwAAAAQ"] [Sat Feb 21 13:12:05.412764 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "aZlo1TcQ3FFpkVv1wBBhNgAAAAo"] [Sat Feb 21 13:12:05.430053 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/with-dotenv/.env"] [unique_id "aZlo1TUKi5B2GfZ3HRGCzgAAAAg"] [Sat Feb 21 13:12:05.446940 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "aZlo1YhPsHRVAc81jVCKGAAAAAY"] [Sat Feb 21 13:12:05.465275 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "aZlo1QucuRjmpRitlBtLAgAAAAA"] [Sat Feb 21 13:12:05.483786 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/with-relay-modern/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4qwAAAAk"] [Sat Feb 21 13:12:05.501155 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "aZlo1RHl2U-jS0ZSEvYSKwAAAAM"] [Sat Feb 21 13:12:05.518203 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/exapi/.env"] [unique_id "aZlo1RB7zWRWEp-p13p4JAAAAAU"] [Sat Feb 21 13:12:05.536346 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Exercise.Frontend/.env"] [unique_id "aZlo1fkdT_IobDccX58WEwAAAAI"] [Sat Feb 21 13:12:05.555289 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vCAAAAAQ"] [Sat Feb 21 13:12:05.556500 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vCAAAAAQ"] [Sat Feb 21 13:12:05.556539 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vCAAAAAQ"] [Sat Feb 21 13:12:05.574620 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/export/.env"] [unique_id "aZlo1TcQ3FFpkVv1wBBhNwAAAAo"] [Sat Feb 21 13:12:05.591460 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fastlane/.env"] [unique_id "aZlo1TUKi5B2GfZ3HRGCzwAAAAg"] [Sat Feb 21 13:12:05.611027 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/favicons/.env"] [unique_id "aZlo1YhPsHRVAc81jVCKGQAAAAY"] [Sat Feb 21 13:12:05.628237 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/favs/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4rAAAAAk"] [Sat Feb 21 13:12:05.646208 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/FE/huey/.env"] [unique_id "aZlo1RHl2U-jS0ZSEvYSLAAAAAM"] [Sat Feb 21 13:12:05.664547 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fedex/.env"] [unique_id "aZlo1RB7zWRWEp-p13p4JQAAAAU"] [Sat Feb 21 13:12:05.682905 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fhir-api/.env"] [unique_id "aZlo1fkdT_IobDccX58WFAAAAAI"] [Sat Feb 21 13:12:05.699310 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/files/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vCQAAAAQ"] [Sat Feb 21 13:12:05.720282 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fileserver/.env"] [unique_id "aZlo1TcQ3FFpkVv1wBBhOAAAAAo"] [Sat Feb 21 13:12:05.738747 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/films/.env"] [unique_id "aZlo1TUKi5B2GfZ3HRGC0AAAAAg"] [Sat Feb 21 13:12:05.758692 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "aZlo1YhPsHRVAc81jVCKGgAAAAY"] [Sat Feb 21 13:12:05.776967 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4rQAAAAk"] [Sat Feb 21 13:12:05.797851 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZlo1dLbd4zJn3wkh3d4WwAAAAc"] [Sat Feb 21 13:12:05.817677 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "aZlo1RHl2U-jS0ZSEvYSLQAAAAM"] [Sat Feb 21 13:12:05.856594 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/first-network/.env"] [unique_id "aZlo1fkdT_IobDccX58WFQAAAAI"] [Sat Feb 21 13:12:05.875206 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/FIRST_CONFIG/.env"] [unique_id "aZlo1enNlyfrsrZbi4_vCgAAAAQ"] [Sat Feb 21 13:12:05.895134 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fisdom/fisdom/.env"] [unique_id "aZlo1QucuRjmpRitlBtLBAAAAAA"] [Sat Feb 21 13:12:05.914457 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fixtures/blocks/.env"] [unique_id "aZlo1TcQ3FFpkVv1wBBhOQAAAAo"] [Sat Feb 21 13:12:05.935453 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "aZlo1TUKi5B2GfZ3HRGC0QAAAAg"] [Sat Feb 21 13:12:05.953312 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fixtures/flight/.env"] [unique_id "aZlo1YhPsHRVAc81jVCKGwAAAAY"] [Sat Feb 21 13:12:05.974017 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fixtures/kitchensink/.env"] [unique_id "aZlo1S3-_6b3eKRK8zI4rgAAAAk"] [Sat Feb 21 13:12:05.993123 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/flask/.env"] [unique_id "aZlo1dLbd4zJn3wkh3d4XAAAAAc"] [Sat Feb 21 13:12:06.010737 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/flask_test_uploads/.env"] [unique_id "aZlo1hHl2U-jS0ZSEvYSLgAAAAM"] [Sat Feb 21 13:12:06.029894 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fm/.env"] [unique_id "aZlo1hB7zWRWEp-p13p4JwAAAAU"] [Sat Feb 21 13:12:06.047989 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/font-icons/.env"] [unique_id "aZlo1vkdT_IobDccX58WFgAAAAI"] [Sat Feb 21 13:12:06.065535 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/fonts/.env"] [unique_id "aZlo1unNlyfrsrZbi4_vCwAAAAQ"] [Sat Feb 21 13:12:06.084713 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /framework/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/framework/.env"] [unique_id "aZlo1gucuRjmpRitlBtLBQAAAAA"] [Sat Feb 21 13:12:06.103297 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/front-app/.env"] [unique_id "aZlo1jUKi5B2GfZ3HRGC0gAAAAg"] [Sat Feb 21 13:12:06.123672 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/front-empathy/.env"] [unique_id "aZlo1ohPsHRVAc81jVCKHAAAAAY"] [Sat Feb 21 13:12:06.141385 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/front-end/.env"] [unique_id "aZlo1i3-_6b3eKRK8zI4rwAAAAk"] [Sat Feb 21 13:12:06.162804 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/front/.env"] [unique_id "aZlo1hHl2U-jS0ZSEvYSLwAAAAM"] [Sat Feb 21 13:12:06.182172 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/front/src/.env"] [unique_id "aZlo1hB7zWRWEp-p13p4KAAAAAU"] [Sat Feb 21 13:12:06.200640 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/frontend/momentum-fe/.env"] [unique_id "aZlo1vkdT_IobDccX58WFwAAAAI"] [Sat Feb 21 13:12:06.220190 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/frontend/react/.env"] [unique_id "aZlo1unNlyfrsrZbi4_vDAAAAAQ"] [Sat Feb 21 13:12:06.242053 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/frontend/vue/.env"] [unique_id "aZlo1gucuRjmpRitlBtLBgAAAAA"] [Sat Feb 21 13:12:06.280824 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/frontendfinaltest/.env"] [unique_id "aZlo1ohPsHRVAc81jVCKHQAAAAY"] [Sat Feb 21 13:12:06.300333 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ftp/.env"] [unique_id "aZlo1i3-_6b3eKRK8zI4sAAAAAk"] [Sat Feb 21 13:12:06.320029 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ftpmaster/.env"] [unique_id "aZlo1hHl2U-jS0ZSEvYSMAAAAAM"] [Sat Feb 21 13:12:06.341284 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /functions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/functions/.env"] [unique_id "aZlo1hB7zWRWEp-p13p4KQAAAAU"] [Sat Feb 21 13:12:06.383257 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gcp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/gcp/.env"] [unique_id "aZlo1vkdT_IobDccX58WGAAAAAI"] [Sat Feb 21 13:12:06.471140 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/github-connect/.env"] [unique_id "aZlo1tLbd4zJn3wkh3d4XgAAAAc"] [Sat Feb 21 13:12:06.489817 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /google/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/google/.env"] [unique_id "aZlo1ohPsHRVAc81jVCKHgAAAAY"] [Sat Feb 21 13:12:06.546219 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/grems-api/.env"] [unique_id "aZlo1hB7zWRWEp-p13p4KgAAAAU"] [Sat Feb 21 13:12:06.564542 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/grems-frontend/.env"] [unique_id "aZlo1jcQ3FFpkVv1wBBhPAAAAAo"] [Sat Feb 21 13:12:06.582257 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Hash/.env"] [unique_id "aZlo1vkdT_IobDccX58WGQAAAAI"] [Sat Feb 21 13:12:06.601148 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/hasura/.env"] [unique_id "aZlo1unNlyfrsrZbi4_vDgAAAAQ"] [Sat Feb 21 13:12:06.637747 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Helmetjs/.env"] [unique_id "aZlo1tLbd4zJn3wkh3d4XwAAAAc"] [Sat Feb 21 13:12:06.655916 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/hgs-static/.env"] [unique_id "aZlo1ohPsHRVAc81jVCKHwAAAAY"] [Sat Feb 21 13:12:06.680080 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/higlass-website/.env"] [unique_id "aZlo1i3-_6b3eKRK8zI4sgAAAAk"] [Sat Feb 21 13:12:06.702180 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/home/.env"] [unique_id "aZlo1hHl2U-jS0ZSEvYSMgAAAAM"] [Sat Feb 21 13:12:06.720266 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/horde/.env"] [unique_id "aZlo1jcQ3FFpkVv1wBBhPQAAAAo"] [Sat Feb 21 13:12:06.744836 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/hotpot-app-frontend/.env"] [unique_id "aZlo1vkdT_IobDccX58WGgAAAAI"] [Sat Feb 21 13:12:06.765122 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/htdocs/.env"] [unique_id "aZlo1unNlyfrsrZbi4_vDwAAAAQ"] [Sat Feb 21 13:12:06.787331 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/html/.env"] [unique_id "aZlo1gucuRjmpRitlBtLCQAAAAA"] [Sat Feb 21 13:12:06.810256 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/http/.env"] [unique_id "aZlo1tLbd4zJn3wkh3d4YAAAAAc"] [Sat Feb 21 13:12:06.830695 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/httpboot/.env"] [unique_id "aZlo1ohPsHRVAc81jVCKIAAAAAY"] [Sat Feb 21 13:12:06.854003 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/httpdocs/.env"] [unique_id "aZlo1i3-_6b3eKRK8zI4swAAAAk"] [Sat Feb 21 13:12:06.879278 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/HUNIV_migration/.env"] [unique_id "aZlo1hHl2U-jS0ZSEvYSMwAAAAM"] [Sat Feb 21 13:12:06.916836 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/icon/.env"] [unique_id "aZlo1jUKi5B2GfZ3HRGC1gAAAAg"] [Sat Feb 21 13:12:06.934880 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/icons/.env"] [unique_id "aZlo1vkdT_IobDccX58WGwAAAAI"] [Sat Feb 21 13:12:06.953709 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ikiwiki/.env"] [unique_id "aZlo1unNlyfrsrZbi4_vEAAAAAQ"] [Sat Feb 21 13:12:06.974329 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/image_data/.env"] [unique_id "aZlo1gucuRjmpRitlBtLCgAAAAA"] [Sat Feb 21 13:12:06.994203 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Imagebord/.env"] [unique_id "aZlo1tLbd4zJn3wkh3d4YQAAAAc"] [Sat Feb 21 13:12:07.013138 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/images/.env"] [unique_id "aZlo1xB7zWRWEp-p13p4LAAAAAU"] [Sat Feb 21 13:12:07.031094 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/img/.env"] [unique_id "aZlo14hPsHRVAc81jVCKIQAAAAY"] [Sat Feb 21 13:12:07.090497 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/includes/.env"] [unique_id "aZlo1zcQ3FFpkVv1wBBhPwAAAAo"] [Sat Feb 21 13:12:07.327490 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/install/.env"] [unique_id "aZlo19Lbd4zJn3wkh3d4YwAAAAc"] [Sat Feb 21 13:12:07.348802 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/InstantCV/server/.env"] [unique_id "aZlo14hPsHRVAc81jVCKIwAAAAY"] [Sat Feb 21 13:12:07.439418 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/items/.env"] [unique_id "aZlo1-nNlyfrsrZbi4_vEwAAAAQ"] [Sat Feb 21 13:12:07.458502 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/javascript/.env"] [unique_id "aZlo1xB7zWRWEp-p13p4LgAAAAU"] [Sat Feb 21 13:12:07.478326 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jenkins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/jenkins/.env"] [unique_id "aZlo1wucuRjmpRitlBtLDQAAAAA"] [Sat Feb 21 13:12:07.479411 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/jenkins/.env"] [unique_id "aZlo1wucuRjmpRitlBtLDQAAAAA"] [Sat Feb 21 13:12:07.479457 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/jenkins/.env"] [unique_id "aZlo1wucuRjmpRitlBtLDQAAAAA"] [Sat Feb 21 13:12:07.515402 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/joomla/.env"] [unique_id "aZlo14hPsHRVAc81jVCKJAAAAAY"] [Sat Feb 21 13:12:07.533611 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js-plugin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/js-plugin/.env"] [unique_id "aZlo1y3-_6b3eKRK8zI4twAAAAk"] [Sat Feb 21 13:12:07.678366 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jsrelay/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/jsrelay/.env"] [unique_id "aZlo19Lbd4zJn3wkh3d4ZQAAAAc"] [Sat Feb 21 13:12:07.696621 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jupyter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/jupyter/.env"] [unique_id "aZlo14hPsHRVAc81jVCKJQAAAAY"] [Sat Feb 21 13:12:07.716362 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /khanlinks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/khanlinks/.env"] [unique_id "aZlo1_kdT_IobDccX58WHwAAAAI"] [Sat Feb 21 13:12:07.735148 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kibana/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/kibana/.env"] [unique_id "aZlo1xHl2U-jS0ZSEvYSOAAAAAM"] [Sat Feb 21 13:12:07.754036 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kodenames-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/kodenames-server/.env"] [unique_id "aZlo1zcQ3FFpkVv1wBBhQwAAAAo"] [Sat Feb 21 13:12:07.774871 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kolab-syncroton/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/kolab-syncroton/.env"] [unique_id "aZlo1-nNlyfrsrZbi4_vFQAAAAQ"] [Sat Feb 21 13:12:07.794533 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Kubernetes/.env"] [unique_id "aZlo1xB7zWRWEp-p13p4MAAAAAU"] [Sat Feb 21 13:12:07.812439 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/kubernetes/.env"] [unique_id "aZlo1wucuRjmpRitlBtLDwAAAAA"] [Sat Feb 21 13:12:07.849264 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/lab/.env"] [unique_id "aZlo14hPsHRVAc81jVCKJgAAAAY"] [Sat Feb 21 13:12:07.869919 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/lambda/.env"] [unique_id "aZlo1_kdT_IobDccX58WIAAAAAI"] [Sat Feb 21 13:12:07.888215 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /latest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/latest/.env"] [unique_id "aZlo1xHl2U-jS0ZSEvYSOQAAAAM"] [Sat Feb 21 13:12:07.904544 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /layout/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/layout/.env"] [unique_id "aZlo1zcQ3FFpkVv1wBBhRAAAAAo"] [Sat Feb 21 13:12:07.921995 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/lcomernbootcamp/projbackend/.env"] [unique_id "aZlo1-nNlyfrsrZbi4_vFgAAAAQ"] [Sat Feb 21 13:12:07.939276 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /leafer-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/leafer-app/.env"] [unique_id "aZlo1xB7zWRWEp-p13p4MQAAAAU"] [Sat Feb 21 13:12:07.956751 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ledger_sync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ledger_sync/.env"] [unique_id "aZlo1y3-_6b3eKRK8zI4uQAAAAk"] [Sat Feb 21 13:12:08.012833 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /legal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/legal/.env"] [unique_id "aZlo2IhPsHRVAc81jVCKJwAAAAY"] [Sat Feb 21 13:12:08.029733 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/lemonldap-ng-doc/.env"] [unique_id "aZlo2DUKi5B2GfZ3HRGC3AAAAAg"] [Sat Feb 21 13:12:08.046788 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-fr-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "aZlo2PkdT_IobDccX58WIQAAAAI"] [Sat Feb 21 13:12:08.064689 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /letsencrypt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/letsencrypt/.env"] [unique_id "aZlo2BHl2U-jS0ZSEvYSOgAAAAM"] [Sat Feb 21 13:12:08.082565 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/lib/.env"] [unique_id "aZlo2DcQ3FFpkVv1wBBhRQAAAAo"] [Sat Feb 21 13:12:08.117627 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libraries/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/libraries/.env"] [unique_id "aZlo2BB7zWRWEp-p13p4MgAAAAU"] [Sat Feb 21 13:12:08.138843 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Library/.env"] [unique_id "aZlo2C3-_6b3eKRK8zI4ugAAAAk"] [Sat Feb 21 13:12:08.158592 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/libs/.env"] [unique_id "aZlo2AucuRjmpRitlBtLEQAAAAA"] [Sat Feb 21 13:12:08.213430 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /linux/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/linux/.env"] [unique_id "aZlo2PkdT_IobDccX58WIgAAAAI"] [Sat Feb 21 13:12:08.250987 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /localhost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/localhost/.env"] [unique_id "aZlo2DcQ3FFpkVv1wBBhRgAAAAo"] [Sat Feb 21 13:12:08.269105 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /locally/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/locally/.env"] [unique_id "aZlo2OnNlyfrsrZbi4_vGAAAAAQ"] [Sat Feb 21 13:12:08.303582 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /log/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/log/.env"] [unique_id "aZlo2C3-_6b3eKRK8zI4uwAAAAk"] [Sat Feb 21 13:12:08.322170 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/log/development.log"] [unique_id "aZlo2NLbd4zJn3wkh3d4aQAAAAc"] [Sat Feb 21 13:12:08.342011 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/logging/.env"] [unique_id "aZlo2IhPsHRVAc81jVCKKQAAAAY"] [Sat Feb 21 13:12:08.379632 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/login/.env"] [unique_id "aZlo2BHl2U-jS0ZSEvYSPAAAAAM"] [Sat Feb 21 13:12:08.417284 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/logs/.env"] [unique_id "aZlo2OnNlyfrsrZbi4_vGQAAAAQ"] [Sat Feb 21 13:12:08.434387 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/logs/access.log"] [unique_id "aZlo2BB7zWRWEp-p13p4NAAAAAU"] [Sat Feb 21 13:12:08.452111 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/logs/app.log"] [unique_id "aZlo2DUKi5B2GfZ3HRGC3gAAAAg"] [Sat Feb 21 13:12:08.472031 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/logs/error.log"] [unique_id "aZlo2C3-_6b3eKRK8zI4vAAAAAk"] [Sat Feb 21 13:12:08.491673 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/magento/.env"] [unique_id "aZlo2NLbd4zJn3wkh3d4agAAAAc"] [Sat Feb 21 13:12:08.513731 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailinabox/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mailinabox/.env"] [unique_id "aZlo2IhPsHRVAc81jVCKKgAAAAY"] [Sat Feb 21 13:12:08.533146 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailman/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mailman/.env"] [unique_id "aZlo2PkdT_IobDccX58WJAAAAAI"] [Sat Feb 21 13:12:08.533559 2026] [cgi:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] AH02811: stderr from /usr/local/cpanel/3rdparty/mailman/cgi-bin/.env: script not found or unable to stat [Sat Feb 21 13:12:08.533684 2026] [core:crit] [pid 1985129:tid 1985129] (13)Permission denied: [client 185.177.72.22:0] AH00529: /home/tech2tech/public_html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/tech2tech/public_html/' is executable [Sat Feb 21 13:12:08.826060 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/main_user/.env"] [unique_id "aZlo2C3-_6b3eKRK8zI4vgAAAAk"] [Sat Feb 21 13:12:08.827095 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/main_user/.env"] [unique_id "aZlo2C3-_6b3eKRK8zI4vgAAAAk"] [Sat Feb 21 13:12:08.827125 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/main_user/.env"] [unique_id "aZlo2C3-_6b3eKRK8zI4vgAAAAk"] [Sat Feb 21 13:12:08.882031 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /manual/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/manual/.env"] [unique_id "aZlo2PkdT_IobDccX58WJgAAAAI"] [Sat Feb 21 13:12:08.899586 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /master/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/master/.env"] [unique_id "aZlo2AucuRjmpRitlBtLFQAAAAA"] [Sat Feb 21 13:12:08.916706 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/media/.env"] [unique_id "aZlo2OnNlyfrsrZbi4_vHAAAAAQ"] [Sat Feb 21 13:12:08.934967 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /memcached/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/memcached/.env"] [unique_id "aZlo2BB7zWRWEp-p13p4NwAAAAU"] [Sat Feb 21 13:12:08.955725 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mentorg-lava-docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mentorg-lava-docker/.env"] [unique_id "aZlo2DUKi5B2GfZ3HRGC4QAAAAg"] [Sat Feb 21 13:12:08.974929 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react-communication/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/micro-app-react-communication/.env"] [unique_id "aZlo2C3-_6b3eKRK8zI4vwAAAAk"] [Sat Feb 21 13:12:08.992818 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/micro-app-react/.env"] [unique_id "aZlo2DcQ3FFpkVv1wBBhSgAAAAo"] [Sat Feb 21 13:12:09.010986 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mindsweeper/gui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mindsweeper/gui/.env"] [unique_id "aZlo2dLbd4zJn3wkh3d4bQAAAAc"] [Sat Feb 21 13:12:09.030104 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /minified/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/minified/.env"] [unique_id "aZlo2YhPsHRVAc81jVCKLQAAAAY"] [Sat Feb 21 13:12:09.048319 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /misc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/misc/.env"] [unique_id "aZlo2fkdT_IobDccX58WJwAAAAI"] [Sat Feb 21 13:12:09.067000 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Modix/ClientApp/.env"] [unique_id "aZlo2QucuRjmpRitlBtLFgAAAAA"] [Sat Feb 21 13:12:09.086777 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monerod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/monerod/.env"] [unique_id "aZlo2enNlyfrsrZbi4_vHQAAAAQ"] [Sat Feb 21 13:12:09.105607 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mongodb/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/mongodb/config/dev/.env"] [unique_id "aZlo2RB7zWRWEp-p13p4OAAAAAU"] [Sat Feb 21 13:12:09.123519 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monitoring/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/monitoring/compose/.env"] [unique_id "aZlo2TUKi5B2GfZ3HRGC4gAAAAg"] [Sat Feb 21 13:12:09.140778 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /moodledata/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/moodledata/.env"] [unique_id "aZlo2S3-_6b3eKRK8zI4wAAAAAk"] [Sat Feb 21 13:12:09.159818 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /msks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/msks/.env"] [unique_id "aZlo2RHl2U-jS0ZSEvYSQAAAAAM"] [Sat Feb 21 13:12:09.178719 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /munki_repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/munki_repo/.env"] [unique_id "aZlo2TcQ3FFpkVv1wBBhSwAAAAo"] [Sat Feb 21 13:12:09.196733 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /music/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/music/.env"] [unique_id "aZlo2dLbd4zJn3wkh3d4bgAAAAc"] [Sat Feb 21 13:12:09.216159 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "aZlo2YhPsHRVAc81jVCKLgAAAAY"] [Sat Feb 21 13:12:09.249697 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /name/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/name/.env"] [unique_id "aZlo2QucuRjmpRitlBtLFwAAAAA"] [Sat Feb 21 13:12:09.266361 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/nest/.env"] [unique_id "aZlo2RB7zWRWEp-p13p4OQAAAAU"] [Sat Feb 21 13:12:09.300485 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new-js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/new-js/.env"] [unique_id "aZlo2S3-_6b3eKRK8zI4wQAAAAk"] [Sat Feb 21 13:12:09.336430 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /news-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/news-app/.env"] [unique_id "aZlo2TcQ3FFpkVv1wBBhTAAAAAo"] [Sat Feb 21 13:12:09.354687 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/next/.env"] [unique_id "aZlo2dLbd4zJn3wkh3d4bwAAAAc"] [Sat Feb 21 13:12:09.375553 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/nginx-server/.env"] [unique_id "aZlo2fkdT_IobDccX58WKQAAAAI"] [Sat Feb 21 13:12:09.393069 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /niffler-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/niffler-frontend/.env"] [unique_id "aZlo2QucuRjmpRitlBtLGAAAAAA"] [Sat Feb 21 13:12:09.411242 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/node_modules/.env"] [unique_id "aZlo2RB7zWRWEp-p13p4OgAAAAU"] [Sat Feb 21 13:12:09.429103 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "aZlo2TUKi5B2GfZ3HRGC5AAAAAg"] [Sat Feb 21 13:12:09.447101 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "aZlo2S3-_6b3eKRK8zI4wgAAAAk"] [Sat Feb 21 13:12:09.466539 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /novnc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/noVNC/.env"] [unique_id "aZlo2RHl2U-jS0ZSEvYSQgAAAAM"] [Sat Feb 21 13:12:09.506956 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Nuke.App.Ui/.env"] [unique_id "aZlo2dLbd4zJn3wkh3d4cAAAAAc"] [Sat Feb 21 13:12:09.529061 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/nuxt/.env"] [unique_id "aZlo2enNlyfrsrZbi4_vHwAAAAQ"] [Sat Feb 21 13:12:09.642745 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/old/.env"] [unique_id "aZlo2S3-_6b3eKRK8zI4wwAAAAk"] [Sat Feb 21 13:12:09.697724 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /oldsanta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/oldsanta/.env"] [unique_id "aZlo2TcQ3FFpkVv1wBBhTgAAAAo"] [Sat Feb 21 13:12:09.715134 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opencart/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/opencart/.env"] [unique_id "aZlo2dLbd4zJn3wkh3d4cQAAAAc"] [Sat Feb 21 13:12:09.734725 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ops/vagrant/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ops/vagrant/.env"] [unique_id "aZlo2enNlyfrsrZbi4_vIAAAAAQ"] [Sat Feb 21 13:12:09.751751 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /option/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/option/.env"] [unique_id "aZlo2fkdT_IobDccX58WKwAAAAI"] [Sat Feb 21 13:12:09.775105 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /orientdb-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/orientdb-client/.env"] [unique_id "aZlo2QucuRjmpRitlBtLGgAAAAA"] [Sat Feb 21 13:12:09.793329 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /outputs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/outputs/.env"] [unique_id "aZlo2RB7zWRWEp-p13p4PAAAAAU"] [Sat Feb 21 13:12:09.813003 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /owncloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/owncloud/.env"] [unique_id "aZlo2TUKi5B2GfZ3HRGC5gAAAAg"] [Sat Feb 21 13:12:09.850484 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/styled-ui-docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/packages/styled-ui-docs/.env"] [unique_id "aZlo2YhPsHRVAc81jVCKMQAAAAY"] [Sat Feb 21 13:12:09.872692 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/packages/web/.env"] [unique_id "aZlo2dLbd4zJn3wkh3d4cgAAAAc"] [Sat Feb 21 13:12:09.890957 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packed/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/packed/.env"] [unique_id "aZlo2enNlyfrsrZbi4_vIQAAAAQ"] [Sat Feb 21 13:12:09.910217 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /page-editor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/page-editor/.env"] [unique_id "aZlo2fkdT_IobDccX58WLAAAAAI"] [Sat Feb 21 13:12:09.930443 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/panel/.env"] [unique_id "aZlo2QucuRjmpRitlBtLGwAAAAA"] [Sat Feb 21 13:12:09.949802 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /parity/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/parity/.env"] [unique_id "aZlo2RB7zWRWEp-p13p4PQAAAAU"] [Sat Feb 21 13:12:09.969147 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Passportjs/.env"] [unique_id "aZlo2TUKi5B2GfZ3HRGC5wAAAAg"] [Sat Feb 21 13:12:09.988229 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /patchwork/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/patchwork/.env"] [unique_id "aZlo2S3-_6b3eKRK8zI4xQAAAAk"] [Sat Feb 21 13:12:10.005976 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/path/.env"] [unique_id "aZlo2ohPsHRVAc81jVCKMgAAAAY"] [Sat Feb 21 13:12:10.006881 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/path/.env"] [unique_id "aZlo2ohPsHRVAc81jVCKMgAAAAY"] [Sat Feb 21 13:12:10.006918 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/path/.env"] [unique_id "aZlo2ohPsHRVAc81jVCKMgAAAAY"] [Sat Feb 21 13:12:10.022684 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pfbe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/pfbe/.env"] [unique_id "aZlo2tLbd4zJn3wkh3d4cwAAAAc"] [Sat Feb 21 13:12:10.042921 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] AH01630: client denied by server configuration: /home/tech2tech/public_html/php.ini [Sat Feb 21 13:12:10.574072 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pictures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/pictures/.env"] [unique_id "aZlo2gucuRjmpRitlBtLHwAAAAA"] [Sat Feb 21 13:12:10.592624 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/platform/.env"] [unique_id "aZlo2hHl2U-jS0ZSEvYSRwAAAAM"] [Sat Feb 21 13:12:10.611458 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /playground/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/playground/.env"] [unique_id "aZlo2jcQ3FFpkVv1wBBhUwAAAAo"] [Sat Feb 21 13:12:10.630142 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugin_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/plugin_static/.env"] [unique_id "aZlo2hB7zWRWEp-p13p4QQAAAAU"] [Sat Feb 21 13:12:10.648045 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/plugins/.env"] [unique_id "aZlo2tLbd4zJn3wkh3d4dgAAAAc"] [Sat Feb 21 13:12:10.666432 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /post-deployment/.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/post-deployment/.vscode/.env"] [unique_id "aZlo2jUKi5B2GfZ3HRGC6wAAAAg"] [Sat Feb 21 13:12:10.684508 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postfixadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/postfixadmin/.env"] [unique_id "aZlo2i3-_6b3eKRK8zI4yQAAAAk"] [Sat Feb 21 13:12:10.703280 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/prestashop/.env"] [unique_id "aZlo2ohPsHRVAc81jVCKNgAAAAY"] [Sat Feb 21 13:12:10.723201 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/preview-env/.env"] [unique_id "aZlo2unNlyfrsrZbi4_vJgAAAAQ"] [Sat Feb 21 13:12:10.741777 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/preview/.env"] [unique_id "aZlo2vkdT_IobDccX58WMQAAAAI"] [Sat Feb 21 13:12:10.760627 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /price_hawk_client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/price_hawk_client/.env"] [unique_id "aZlo2gucuRjmpRitlBtLIAAAAAA"] [Sat Feb 21 13:12:10.781577 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/prisma/.env"] [unique_id "aZlo2hHl2U-jS0ZSEvYSSAAAAAM"] [Sat Feb 21 13:12:10.800552 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/private.key"] [unique_id "aZlo2jcQ3FFpkVv1wBBhVAAAAAo"] [Sat Feb 21 13:12:10.802142 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/private.key"] [unique_id "aZlo2jcQ3FFpkVv1wBBhVAAAAAo"] [Sat Feb 21 13:12:10.802195 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/private.key"] [unique_id "aZlo2jcQ3FFpkVv1wBBhVAAAAAo"] [Sat Feb 21 13:12:10.817745 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /processor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/processor/.env"] [unique_id "aZlo2tLbd4zJn3wkh3d4dwAAAAc"] [Sat Feb 21 13:12:10.854682 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/prod/.env"] [unique_id "aZlo2i3-_6b3eKRK8zI4ygAAAAk"] [Sat Feb 21 13:12:10.875989 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/product/.env.staging"] [unique_id "aZlo2ohPsHRVAc81jVCKNwAAAAY"] [Sat Feb 21 13:12:10.896403 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/projbackend/.env"] [unique_id "aZlo2unNlyfrsrZbi4_vJwAAAAQ"] [Sat Feb 21 13:12:10.914058 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/project/.env"] [unique_id "aZlo2gucuRjmpRitlBtLIQAAAAA"] [Sat Feb 21 13:12:10.933287 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/project_root/.env"] [unique_id "aZlo2hHl2U-jS0ZSEvYSSQAAAAM"] [Sat Feb 21 13:12:10.950215 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /protected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/protected/.env"] [unique_id "aZlo2jcQ3FFpkVv1wBBhVQAAAAo"] [Sat Feb 21 13:12:10.967468 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/psnlink/.env"] [unique_id "aZlo2tLbd4zJn3wkh3d4eAAAAAc"] [Sat Feb 21 13:12:10.986190 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt2/countries/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/pt2/countries/src/.env"] [unique_id "aZlo2jUKi5B2GfZ3HRGC7QAAAAg"] [Sat Feb 21 13:12:11.005576 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt8/library-backend-gql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/pt8/library-backend-gql/.env"] [unique_id "aZlo2y3-_6b3eKRK8zI4ywAAAAk"] [Sat Feb 21 13:12:11.021820 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pub/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/pub/.env"] [unique_id "aZlo24hPsHRVAc81jVCKOAAAAAY"] [Sat Feb 21 13:12:11.057802 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/public_html/.env"] [unique_id "aZlo2-nNlyfrsrZbi4_vKAAAAAQ"] [Sat Feb 21 13:12:11.076379 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/public_root/.env"] [unique_id "aZlo2wucuRjmpRitlBtLIgAAAAA"] [Sat Feb 21 13:12:11.132018 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /question2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/question2/.env"] [unique_id "aZlo29Lbd4zJn3wkh3d4eQAAAAc"] [Sat Feb 21 13:12:11.151593 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qv-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/qv-frontend/.env"] [unique_id "aZlo2zUKi5B2GfZ3HRGC7gAAAAg"] [Sat Feb 21 13:12:11.171839 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rabbitmq-cluster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rabbitmq-cluster/.env"] [unique_id "aZlo2_kdT_IobDccX58WMwAAAAI"] [Sat Feb 21 13:12:11.191157 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails-api/react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rails-api/react-app/.env"] [unique_id "aZlo2y3-_6b3eKRK8zI4zAAAAAk"] [Sat Feb 21 13:12:11.211970 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rails/.env"] [unique_id "aZlo24hPsHRVAc81jVCKOQAAAAY"] [Sat Feb 21 13:12:11.231786 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rasax/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rasax/.env"] [unique_id "aZlo2xB7zWRWEp-p13p4RAAAAAU"] [Sat Feb 21 13:12:11.251249 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/react/.env"] [unique_id "aZlo2-nNlyfrsrZbi4_vKQAAAAQ"] [Sat Feb 21 13:12:11.270867 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react_todo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/react_todo/.env"] [unique_id "aZlo2wucuRjmpRitlBtLIwAAAAA"] [Sat Feb 21 13:12:11.290601 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /redmine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/redmine/.env"] [unique_id "aZlo2xHl2U-jS0ZSEvYSSwAAAAM"] [Sat Feb 21 13:12:11.312877 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/repo/.env"] [unique_id "aZlo2zcQ3FFpkVv1wBBhVwAAAAo"] [Sat Feb 21 13:12:11.314445 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/repo/.env"] [unique_id "aZlo2zcQ3FFpkVv1wBBhVwAAAAo"] [Sat Feb 21 13:12:11.314512 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/repo/.env"] [unique_id "aZlo2zcQ3FFpkVv1wBBhVwAAAAo"] [Sat Feb 21 13:12:11.333289 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/repos/.env"] [unique_id "aZlo29Lbd4zJn3wkh3d4egAAAAc"] [Sat Feb 21 13:12:11.353012 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repository/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/repository/.env"] [unique_id "aZlo2zUKi5B2GfZ3HRGC7wAAAAg"] [Sat Feb 21 13:12:11.372523 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resources/.env"] [unique_id "aZlo2_kdT_IobDccX58WNAAAAAI"] [Sat Feb 21 13:12:11.391597 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resources/docker/.env"] [unique_id "aZlo24hPsHRVAc81jVCKOgAAAAY"] [Sat Feb 21 13:12:11.409055 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resources/docker/mysql/.env"] [unique_id "aZlo2xB7zWRWEp-p13p4RQAAAAU"] [Sat Feb 21 13:12:11.426763 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/phpmyadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resources/docker/phpmyadmin/.env"] [unique_id "aZlo2-nNlyfrsrZbi4_vKgAAAAQ"] [Sat Feb 21 13:12:11.446375 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rabbitmq/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resources/docker/rabbitmq/.env"] [unique_id "aZlo2xHl2U-jS0ZSEvYSTAAAAAM"] [Sat Feb 21 13:12:11.464791 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rediscommander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resources/docker/rediscommander/.env"] [unique_id "aZlo2zcQ3FFpkVv1wBBhWAAAAAo"] [Sat Feb 21 13:12:11.482061 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resourcesync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/resourcesync/.env"] [unique_id "aZlo29Lbd4zJn3wkh3d4ewAAAAc"] [Sat Feb 21 13:12:11.519776 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rest/.env"] [unique_id "aZlo2_kdT_IobDccX58WNQAAAAI"] [Sat Feb 21 13:12:11.541252 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /restapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/restapi/.env"] [unique_id "aZlo24hPsHRVAc81jVCKOwAAAAY"] [Sat Feb 21 13:12:11.560816 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /results/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/results/.env"] [unique_id "aZlo2xB7zWRWEp-p13p4RgAAAAU"] [Sat Feb 21 13:12:11.599266 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /robots/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/robots/.env"] [unique_id "aZlo2xHl2U-jS0ZSEvYSTQAAAAM"] [Sat Feb 21 13:12:11.636410 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/root/.env"] [unique_id "aZlo2zcQ3FFpkVv1wBBhWQAAAAo"] [Sat Feb 21 13:12:11.655970 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rosterback/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rosterBack/.env"] [unique_id "aZlo29Lbd4zJn3wkh3d4fAAAAAc"] [Sat Feb 21 13:12:11.676563 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcube/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/roundcube/.env"] [unique_id "aZlo2zUKi5B2GfZ3HRGC8QAAAAg"] [Sat Feb 21 13:12:11.695439 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcubemail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/roundcubemail/.env"] [unique_id "aZlo2_kdT_IobDccX58WNgAAAAI"] [Sat Feb 21 13:12:11.714427 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /routes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/routes/.env"] [unique_id "aZlo2wucuRjmpRitlBtLJQAAAAA"] [Sat Feb 21 13:12:11.735094 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /run/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/run/.env"] [unique_id "aZlo24hPsHRVAc81jVCKPAAAAAY"] [Sat Feb 21 13:12:11.753638 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rust-backend/.env"] [unique_id "aZlo2xB7zWRWEp-p13p4RwAAAAU"] [Sat Feb 21 13:12:11.772088 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/dao/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/rust-backend/dao/.env"] [unique_id "aZlo2-nNlyfrsrZbi4_vLAAAAAQ"] [Sat Feb 21 13:12:11.794365 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s-with-me-front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/s-with-me-front/.env"] [unique_id "aZlo2xHl2U-jS0ZSEvYSTgAAAAM"] [Sat Feb 21 13:12:11.836490 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/saas/.env"] [unique_id "aZlo2zcQ3FFpkVv1wBBhWgAAAAo"] [Sat Feb 21 13:12:11.855920 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/chatroom/chatroom-spa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/samples/chatroom/chatroom-spa/.env"] [unique_id "aZlo29Lbd4zJn3wkh3d4fQAAAAc"] [Sat Feb 21 13:12:11.876790 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/docker/deploymentscripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "aZlo2zUKi5B2GfZ3HRGC8gAAAAg"] [Sat Feb 21 13:12:11.912315 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /script/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/script/.env"] [unique_id "aZlo24hPsHRVAc81jVCKPQAAAAY"] [Sat Feb 21 13:12:11.931629 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/scripts/.env"] [unique_id "aZlo2xB7zWRWEp-p13p4SAAAAAU"] [Sat Feb 21 13:12:11.950363 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/fvt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/scripts/fvt/.env"] [unique_id "aZlo2xHl2U-jS0ZSEvYSTwAAAAM"] [Sat Feb 21 13:12:12.013406 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /secrets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/secrets/.env"] [unique_id "aZlo3NLbd4zJn3wkh3d4fgAAAAc"] [Sat Feb 21 13:12:12.031856 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /selfish-darling-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/selfish-darling-backend/.env"] [unique_id "aZlo3DUKi5B2GfZ3HRGC8wAAAAg"] [Sat Feb 21 13:12:12.085837 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve-browserbench/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/serve-browserbench/.env"] [unique_id "aZlo3IhPsHRVAc81jVCKPgAAAAY"] [Sat Feb 21 13:12:12.103169 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Serve_time_server/.env"] [unique_id "aZlo3BB7zWRWEp-p13p4SQAAAAU"] [Sat Feb 21 13:12:12.139198 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/server.log"] [unique_id "aZlo3C3-_6b3eKRK8zI40QAAAAk"] [Sat Feb 21 13:12:12.157864 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/server/config/.env"] [unique_id "aZlo3PkdT_IobDccX58WOAAAAAI"] [Sat Feb 21 13:12:12.176253 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/server/laravel/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhXAAAAAo"] [Sat Feb 21 13:12:12.211742 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/src/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/server/src/persistence/.env"] [unique_id "aZlo3DUKi5B2GfZ3HRGC9AAAAAg"] [Sat Feb 21 13:12:12.231376 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Server_with_db/.env"] [unique_id "aZlo3OnNlyfrsrZbi4_vLgAAAAQ"] [Sat Feb 21 13:12:12.288677 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/service/.env"] [unique_id "aZlo3BB7zWRWEp-p13p4SgAAAAU"] [Sat Feb 21 13:12:12.308795 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/.env"] [unique_id "aZlo3BHl2U-jS0ZSEvYSUQAAAAM"] [Sat Feb 21 13:12:12.328711 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/adminer/.env"] [unique_id "aZlo3C3-_6b3eKRK8zI40gAAAAk"] [Sat Feb 21 13:12:12.347525 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/deployment-agent/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/deployment-agent/.env"] [unique_id "aZlo3PkdT_IobDccX58WOQAAAAI"] [Sat Feb 21 13:12:12.368298 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/documents/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/documents/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhXQAAAAo"] [Sat Feb 21 13:12:12.369400 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/services/documents/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhXQAAAAo"] [Sat Feb 21 13:12:12.369444 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/services/documents/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhXQAAAAo"] [Sat Feb 21 13:12:12.386667 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/graylog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/graylog/.env"] [unique_id "aZlo3NLbd4zJn3wkh3d4gAAAAAc"] [Sat Feb 21 13:12:12.405632 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/jaeger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/jaeger/.env"] [unique_id "aZlo3OnNlyfrsrZbi4_vLwAAAAQ"] [Sat Feb 21 13:12:12.423031 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/minio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/minio/.env"] [unique_id "aZlo3AucuRjmpRitlBtLKQAAAAA"] [Sat Feb 21 13:12:12.439313 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/monitoring/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/monitoring/.env"] [unique_id "aZlo3IhPsHRVAc81jVCKQAAAAAY"] [Sat Feb 21 13:12:12.456682 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/portainer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/portainer/.env"] [unique_id "aZlo3BB7zWRWEp-p13p4SwAAAAU"] [Sat Feb 21 13:12:12.474169 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/redis-commander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/redis-commander/.env"] [unique_id "aZlo3C3-_6b3eKRK8zI40wAAAAk"] [Sat Feb 21 13:12:12.491932 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/registry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/registry/.env"] [unique_id "aZlo3PkdT_IobDccX58WOgAAAAI"] [Sat Feb 21 13:12:12.509486 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/simcore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/simcore/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhXgAAAAo"] [Sat Feb 21 13:12:12.527544 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/traefik/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/services/traefik/.env"] [unique_id "aZlo3NLbd4zJn3wkh3d4gQAAAAc"] [Sat Feb 21 13:12:12.544679 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sessions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sessions/.env"] [unique_id "aZlo3OnNlyfrsrZbi4_vMAAAAAQ"] [Sat Feb 21 13:12:12.580681 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/shared/.env"] [unique_id "aZlo3IhPsHRVAc81jVCKQQAAAAY"] [Sat Feb 21 13:12:12.598425 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shibboleth/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/shibboleth/.env"] [unique_id "aZlo3BB7zWRWEp-p13p4TAAAAAU"] [Sat Feb 21 13:12:12.616817 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/shop/.env"] [unique_id "aZlo3C3-_6b3eKRK8zI41AAAAAk"] [Sat Feb 21 13:12:12.635134 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopware/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/shopware/.env"] [unique_id "aZlo3PkdT_IobDccX58WOwAAAAI"] [Sat Feb 21 13:12:12.653842 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Simple_server/.env"] [unique_id "aZlo3DUKi5B2GfZ3HRGC9gAAAAg"] [Sat Feb 21 13:12:12.671070 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site-library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/site-library/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhXwAAAAo"] [Sat Feb 21 13:12:12.689062 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sitemaps/.env"] [unique_id "aZlo3NLbd4zJn3wkh3d4ggAAAAc"] [Sat Feb 21 13:12:12.721580 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sites/.env"] [unique_id "aZlo3OnNlyfrsrZbi4_vMQAAAAQ"] [Sat Feb 21 13:12:12.739484 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitestatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sitestatic/.env"] [unique_id "aZlo3AucuRjmpRitlBtLKwAAAAA"] [Sat Feb 21 13:12:12.760062 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Socketio/.env"] [unique_id "aZlo3BHl2U-jS0ZSEvYSUwAAAAM"] [Sat Feb 21 13:12:12.777539 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /source/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/source/.env"] [unique_id "aZlo3IhPsHRVAc81jVCKQgAAAAY"] [Sat Feb 21 13:12:12.795460 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sources/.env"] [unique_id "aZlo3BB7zWRWEp-p13p4TQAAAAU"] [Sat Feb 21 13:12:12.812744 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Sources/API/.env"] [unique_id "aZlo3C3-_6b3eKRK8zI41QAAAAk"] [Sat Feb 21 13:12:12.832769 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spearmint/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/spearmint/.env"] [unique_id "aZlo3PkdT_IobDccX58WPAAAAAI"] [Sat Feb 21 13:12:12.851464 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spikes/config-material-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/spikes/config-material-app/.env"] [unique_id "aZlo3DUKi5B2GfZ3HRGC9wAAAAg"] [Sat Feb 21 13:12:12.869992 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/SpotiApps/.env"] [unique_id "aZlo3DcQ3FFpkVv1wBBhYAAAAAo"] [Sat Feb 21 13:12:12.888265 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/instancewithdependentsteps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "aZlo3NLbd4zJn3wkh3d4gwAAAAc"] [Sat Feb 21 13:12:12.906155 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptintegrationproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "aZlo3OnNlyfrsrZbi4_vMgAAAAQ"] [Sat Feb 21 13:12:12.924287 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "aZlo3AucuRjmpRitlBtLLAAAAAA"] [Sat Feb 21 13:12:12.941925 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptvisualizeproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "aZlo3BHl2U-jS0ZSEvYSVAAAAAM"] [Sat Feb 21 13:12:12.960883 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/add-auth/express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/add-auth/express/.env"] [unique_id "aZlo3BB7zWRWEp-p13p4TgAAAAU"] [Sat Feb 21 13:12:12.979587 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/assembly/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/assembly/.env"] [unique_id "aZlo3C3-_6b3eKRK8zI41gAAAAk"] [Sat Feb 21 13:12:12.999646 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/character-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/character-service/.env"] [unique_id "aZlo3PkdT_IobDccX58WPQAAAAI"] [Sat Feb 21 13:12:13.017312 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/client/mobile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/client/mobile/.env"] [unique_id "aZlo3TcQ3FFpkVv1wBBhYQAAAAo"] [Sat Feb 21 13:12:13.035897 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/core/tests/dotenv-files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "aZlo3dLbd4zJn3wkh3d4hAAAAAc"] [Sat Feb 21 13:12:13.054799 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/gameprovider-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/gameprovider-service/.env"] [unique_id "aZlo3enNlyfrsrZbi4_vMwAAAAQ"] [Sat Feb 21 13:12:13.074811 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/main/front-end/.env"] [unique_id "aZlo3QucuRjmpRitlBtLLQAAAAA"] [Sat Feb 21 13:12:13.094062 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/resources/archetype-resources/__rootartifactid__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "aZlo3RHl2U-jS0ZSEvYSVQAAAAM"] [Sat Feb 21 13:12:13.111632 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/renderer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/src/renderer/.env"] [unique_id "aZlo3RB7zWRWEp-p13p4TwAAAAU"] [Sat Feb 21 13:12:13.129287 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/controller/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/srv6_controller/controller/.env"] [unique_id "aZlo3S3-_6b3eKRK8zI41wAAAAk"] [Sat Feb 21 13:12:13.146922 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/srv6_controller/examples/.env"] [unique_id "aZlo3fkdT_IobDccX58WPgAAAAI"] [Sat Feb 21 13:12:13.164868 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/node-manager/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/srv6_controller/node-manager/.env"] [unique_id "aZlo3TcQ3FFpkVv1wBBhYgAAAAo"] [Sat Feb 21 13:12:13.183788 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /st-js-be-2020-movies-two/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/st-js-be-2020-movies-two/.env"] [unique_id "aZlo3dLbd4zJn3wkh3d4hQAAAAc"] [Sat Feb 21 13:12:13.220169 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stackato-pkg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/stackato-pkg/.env"] [unique_id "aZlo3YhPsHRVAc81jVCKRAAAAAY"] [Sat Feb 21 13:12:13.237166 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/stag/.env"] [unique_id "aZlo3QucuRjmpRitlBtLLgAAAAA"] [Sat Feb 21 13:12:13.292320 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/staging/api/.env"] [unique_id "aZlo3RB7zWRWEp-p13p4UAAAAAU"] [Sat Feb 21 13:12:13.310397 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/staging/backend/.env"] [unique_id "aZlo3S3-_6b3eKRK8zI42AAAAAk"] [Sat Feb 21 13:12:13.328230 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/staging/frontend/.env"] [unique_id "aZlo3fkdT_IobDccX58WPwAAAAI"] [Sat Feb 21 13:12:13.346784 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-collected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static-collected/.env"] [unique_id "aZlo3TcQ3FFpkVv1wBBhYwAAAAo"] [Sat Feb 21 13:12:13.365883 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static-html/.env"] [unique_id "aZlo3dLbd4zJn3wkh3d4hgAAAAc"] [Sat Feb 21 13:12:13.383911 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static-root/.env"] [unique_id "aZlo3enNlyfrsrZbi4_vNQAAAAQ"] [Sat Feb 21 13:12:13.403058 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static/.env"] [unique_id "aZlo3YhPsHRVAc81jVCKRQAAAAY"] [Sat Feb 21 13:12:13.655763 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static_prod/.env"] [unique_id "aZlo3QucuRjmpRitlBtLMAAAAAA"] [Sat Feb 21 13:12:13.675849 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static_root/.env"] [unique_id "aZlo3dLbd4zJn3wkh3d4iAAAAAc"] [Sat Feb 21 13:12:13.693494 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/static_user/.env"] [unique_id "aZlo3enNlyfrsrZbi4_vNwAAAAQ"] [Sat Feb 21 13:12:13.711457 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staticfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/staticfiles/.env"] [unique_id "aZlo3YhPsHRVAc81jVCKRwAAAAY"] [Sat Feb 21 13:12:13.730249 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/stats/.env"] [unique_id "aZlo3RHl2U-jS0ZSEvYSWQAAAAM"] [Sat Feb 21 13:12:13.748807 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/storage/.env"] [unique_id "aZlo3fkdT_IobDccX58WQQAAAAI"] [Sat Feb 21 13:12:13.768207 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/storage/.env.local"] [unique_id "aZlo3TUKi5B2GfZ3HRGC_AAAAAg"] [Sat Feb 21 13:12:13.804905 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /strapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/strapi/.env"] [unique_id "aZlo3S3-_6b3eKRK8zI42wAAAAk"] [Sat Feb 21 13:12:13.822883 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /style/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/style/.env"] [unique_id "aZlo3TcQ3FFpkVv1wBBhZgAAAAo"] [Sat Feb 21 13:12:13.841735 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /styles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/styles/.env"] [unique_id "aZlo3QucuRjmpRitlBtLMQAAAAA"] [Sat Feb 21 13:12:13.860033 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stylesheets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/stylesheets/.env"] [unique_id "aZlo3dLbd4zJn3wkh3d4iQAAAAc"] [Sat Feb 21 13:12:13.896211 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/symfony/.env"] [unique_id "aZlo3YhPsHRVAc81jVCKSAAAAAY"] [Sat Feb 21 13:12:13.913762 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system-config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/system-config/.env"] [unique_id "aZlo3RHl2U-jS0ZSEvYSWgAAAAM"] [Sat Feb 21 13:12:13.932360 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/system/.env"] [unique_id "aZlo3fkdT_IobDccX58WQgAAAAI"] [Sat Feb 21 13:12:13.989746 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /target/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/target/.env"] [unique_id "aZlo3TcQ3FFpkVv1wBBhZwAAAAo"] [Sat Feb 21 13:12:14.007808 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr10/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/temanr10/.env"] [unique_id "aZlo3gucuRjmpRitlBtLMgAAAAA"] [Sat Feb 21 13:12:14.026284 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr9/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/temanr9/.env"] [unique_id "aZlo3unNlyfrsrZbi4_vOQAAAAQ"] [Sat Feb 21 13:12:14.062422 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/temp/.env"] [unique_id "aZlo3hHl2U-jS0ZSEvYSWwAAAAM"] [Sat Feb 21 13:12:14.080939 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/template/.env"] [unique_id "aZlo3vkdT_IobDccX58WQwAAAAI"] [Sat Feb 21 13:12:14.098489 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /templates/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/templates/.env"] [unique_id "aZlo3jUKi5B2GfZ3HRGC_gAAAAg"] [Sat Feb 21 13:12:14.150869 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test-network/.env"] [unique_id "aZlo3gucuRjmpRitlBtLMwAAAAA"] [Sat Feb 21 13:12:14.169460 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/addorg3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test-network/addOrg3/.env"] [unique_id "aZlo3unNlyfrsrZbi4_vOgAAAAQ"] [Sat Feb 21 13:12:14.204311 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/aries-js-worker/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "aZlo3hHl2U-jS0ZSEvYSXAAAAAM"] [Sat Feb 21 13:12:14.221206 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/adapter-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/adapter-rest/.env"] [unique_id "aZlo3hB7zWRWEp-p13p4VQAAAAU"] [Sat Feb 21 13:12:14.238858 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/agent-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "aZlo3vkdT_IobDccX58WRAAAAAI"] [Sat Feb 21 13:12:14.256023 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/couchdb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/couchdb/.env"] [unique_id "aZlo3jUKi5B2GfZ3HRGC_wAAAAg"] [Sat Feb 21 13:12:14.274682 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/demo/.env"] [unique_id "aZlo3tLbd4zJn3wkh3d4iwAAAAc"] [Sat Feb 21 13:12:14.292509 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/openapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "aZlo3i3-_6b3eKRK8zI43gAAAAk"] [Sat Feb 21 13:12:14.311256 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-method-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/did-method-rest/.env"] [unique_id "aZlo3jcQ3FFpkVv1wBBhaQAAAAo"] [Sat Feb 21 13:12:14.331622 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "aZlo3gucuRjmpRitlBtLNAAAAAA"] [Sat Feb 21 13:12:14.350147 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/edv-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/edv-rest/.env"] [unique_id "aZlo3unNlyfrsrZbi4_vOwAAAAQ"] [Sat Feb 21 13:12:14.370328 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/openapi-demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/openapi-demo/.env"] [unique_id "aZlo3ohPsHRVAc81jVCKSwAAAAY"] [Sat Feb 21 13:12:14.389940 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/sidetree-mock/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "aZlo3hHl2U-jS0ZSEvYSXQAAAAM"] [Sat Feb 21 13:12:14.408575 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/universalresolver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/universalresolver/.env"] [unique_id "aZlo3hB7zWRWEp-p13p4VgAAAAU"] [Sat Feb 21 13:12:14.427417 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/vc-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/bdd/fixtures/vc-rest/.env"] [unique_id "aZlo3vkdT_IobDccX58WRQAAAAI"] [Sat Feb 21 13:12:14.445568 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/fixtures/.env"] [unique_id "aZlo3jUKi5B2GfZ3HRGDAAAAAAg"] [Sat Feb 21 13:12:14.464713 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/fixtures/app_types/node/.env"] [unique_id "aZlo3tLbd4zJn3wkh3d4jAAAAAc"] [Sat Feb 21 13:12:14.482935 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZlo3i3-_6b3eKRK8zI43wAAAAk"] [Sat Feb 21 13:12:14.483722 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZlo3i3-_6b3eKRK8zI43wAAAAk"] [Sat Feb 21 13:12:14.483748 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZlo3i3-_6b3eKRK8zI43wAAAAk"] [Sat Feb 21 13:12:14.502135 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/node_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/fixtures/node_path/.env"] [unique_id "aZlo3gucuRjmpRitlBtLNQAAAAA"] [Sat Feb 21 13:12:14.520639 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/integration/env-config/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/test/integration/env-config/app/.env"] [unique_id "aZlo3unNlyfrsrZbi4_vPAAAAAQ"] [Sat Feb 21 13:12:15.037146 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/testfiles/.env"] [unique_id "aZlo3-nNlyfrsrZbi4_vPwAAAAQ"] [Sat Feb 21 13:12:15.095187 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/testing/.env"] [unique_id "aZlo3_kdT_IobDccX58WSQAAAAI"] [Sat Feb 21 13:12:15.115078 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/testing/docker/.env"] [unique_id "aZlo3zcQ3FFpkVv1wBBhbQAAAAo"] [Sat Feb 21 13:12:15.133862 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/.env"] [unique_id "aZlo3zUKi5B2GfZ3HRGDBAAAAAg"] [Sat Feb 21 13:12:15.153577 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Tests/Application/.env"] [unique_id "aZlo39Lbd4zJn3wkh3d4kAAAAAc"] [Sat Feb 21 13:12:15.173267 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v10.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aZlo3y3-_6b3eKRK8zI44wAAAAk"] [Sat Feb 21 13:12:15.192560 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v11.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v11.0/.env"] [unique_id "aZlo3-nNlyfrsrZbi4_vQAAAAAQ"] [Sat Feb 21 13:12:15.216009 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v12.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v12.0/.env"] [unique_id "aZlo3xB7zWRWEp-p13p4WgAAAAU"] [Sat Feb 21 13:12:15.235219 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v13.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v13.0/.env"] [unique_id "aZlo34hPsHRVAc81jVCKUAAAAAY"] [Sat Feb 21 13:12:15.253618 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v7.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v7.0/.env"] [unique_id "aZlo3_kdT_IobDccX58WSgAAAAI"] [Sat Feb 21 13:12:15.273329 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v8.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v8.0/.env"] [unique_id "aZlo3wucuRjmpRitlBtLOQAAAAA"] [Sat Feb 21 13:12:15.292758 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v9.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "aZlo3zcQ3FFpkVv1wBBhbgAAAAo"] [Sat Feb 21 13:12:15.312763 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/drupal-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/drupal-test/.env"] [unique_id "aZlo3zUKi5B2GfZ3HRGDBQAAAAg"] [Sat Feb 21 13:12:15.331206 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/integration/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZlo39Lbd4zJn3wkh3d4kQAAAAc"] [Sat Feb 21 13:12:15.351150 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/todo-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tests/todo-react/.env"] [unique_id "aZlo3y3-_6b3eKRK8zI45AAAAAk"] [Sat Feb 21 13:12:15.372018 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testwork_json/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/testwork_json/.env"] [unique_id "aZlo3xHl2U-jS0ZSEvYSYgAAAAM"] [Sat Feb 21 13:12:15.390065 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/theme/.env"] [unique_id "aZlo3-nNlyfrsrZbi4_vQQAAAAQ"] [Sat Feb 21 13:12:15.410275 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/theme_static/.env"] [unique_id "aZlo3xB7zWRWEp-p13p4WwAAAAU"] [Sat Feb 21 13:12:15.429064 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/thumb/.env"] [unique_id "aZlo34hPsHRVAc81jVCKUQAAAAY"] [Sat Feb 21 13:12:15.449772 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumbs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/thumbs/.env"] [unique_id "aZlo3_kdT_IobDccX58WSwAAAAI"] [Sat Feb 21 13:12:15.469470 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tiedostot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tiedostot/.env"] [unique_id "aZlo3wucuRjmpRitlBtLOgAAAAA"] [Sat Feb 21 13:12:15.508095 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tmp/.env"] [unique_id "aZlo3zUKi5B2GfZ3HRGDBgAAAAg"] [Sat Feb 21 13:12:15.526375 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tmp/config/.env"] [unique_id "aZlo39Lbd4zJn3wkh3d4kgAAAAc"] [Sat Feb 21 13:12:15.600901 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/tools/.env"] [unique_id "aZlo34hPsHRVAc81jVCKUgAAAAY"] [Sat Feb 21 13:12:15.620798 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Travel_form/.env"] [unique_id "aZlo3_kdT_IobDccX58WTAAAAAI"] [Sat Feb 21 13:12:15.638404 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ts/prime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ts/prime/.env"] [unique_id "aZlo3zcQ3FFpkVv1wBBhcAAAAAo"] [Sat Feb 21 13:12:15.697673 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ubuntu/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ubuntu/.env"] [unique_id "aZlo3y3-_6b3eKRK8zI45gAAAAk"] [Sat Feb 21 13:12:15.717146 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/ui/.env"] [unique_id "aZlo3-nNlyfrsrZbi4_vQwAAAAQ"] [Sat Feb 21 13:12:15.737748 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unixtime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/unixtime/.env"] [unique_id "aZlo3xB7zWRWEp-p13p4XQAAAAU"] [Sat Feb 21 13:12:15.757819 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unsplash-downloader/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/unsplash-downloader/.env"] [unique_id "aZlo34hPsHRVAc81jVCKUwAAAAY"] [Sat Feb 21 13:12:15.796118 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/upfiles/.env"] [unique_id "aZlo3zcQ3FFpkVv1wBBhcQAAAAo"] [Sat Feb 21 13:12:15.813498 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upload/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/upload/.env"] [unique_id "aZlo3xHl2U-jS0ZSEvYSZAAAAAM"] [Sat Feb 21 13:12:15.831815 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/uploads/.env"] [unique_id "aZlo3zUKi5B2GfZ3HRGDCAAAAAg"] [Sat Feb 21 13:12:15.849090 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /urlmem-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/urlmem-app/.env"] [unique_id "aZlo39Lbd4zJn3wkh3d4lAAAAAc"] [Sat Feb 21 13:12:15.868573 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/user/.env.staging"] [unique_id "aZlo3y3-_6b3eKRK8zI45wAAAAk"] [Sat Feb 21 13:12:15.905514 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/User_info/.env"] [unique_id "aZlo3-nNlyfrsrZbi4_vRAAAAAQ"] [Sat Feb 21 13:12:15.924748 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/v1/.env"] [unique_id "aZlo3xB7zWRWEp-p13p4XgAAAAU"] [Sat Feb 21 13:12:15.998795 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/v2/.env"] [unique_id "aZlo3xHl2U-jS0ZSEvYSZQAAAAM"] [Sat Feb 21 13:12:16.017471 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/var/backup/.env"] [unique_id "aZlo4DUKi5B2GfZ3HRGDCQAAAAg"] [Sat Feb 21 13:12:16.035885 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/.env"] [unique_id "aZlo4NLbd4zJn3wkh3d4lQAAAAc"] [Sat Feb 21 13:12:16.055425 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/gobuffalo/envy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/github.com/gobuffalo/envy/.env"] [unique_id "aZlo4C3-_6b3eKRK8zI46AAAAAk"] [Sat Feb 21 13:12:16.077487 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/subosito/gotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/github.com/subosito/gotenv/.env"] [unique_id "aZlo4AucuRjmpRitlBtLPQAAAAA"] [Sat Feb 21 13:12:16.131507 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /videos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/videos/.env"] [unique_id "aZlo4DcQ3FFpkVv1wBBhcwAAAAo"] [Sat Feb 21 13:12:16.168609 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vm-docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vm-docker-compose/.env"] [unique_id "aZlo4DUKi5B2GfZ3HRGDCgAAAAg"] [Sat Feb 21 13:12:16.190311 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vod_installer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vod_installer/.env"] [unique_id "aZlo4NLbd4zJn3wkh3d4lgAAAAc"] [Sat Feb 21 13:12:16.198402 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlo4IhPsHRVAc81jVCKVQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:12:16.198466 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlo4IhPsHRVAc81jVCKVQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:12:16.208193 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue-end/vue-til/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vue-end/vue-til/.env"] [unique_id "aZlo4C3-_6b3eKRK8zI46QAAAAk"] [Sat Feb 21 13:12:16.226980 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vue/.env"] [unique_id "aZlo4AucuRjmpRitlBtLPgAAAAA"] [Sat Feb 21 13:12:16.246318 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/vuecli/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vue/vuecli/.env"] [unique_id "aZlo4BB7zWRWEp-p13p4YAAAAAU"] [Sat Feb 21 13:12:16.266363 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue_crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vue_CRM/.env"] [unique_id "aZlo4PkdT_IobDccX58WUAAAAAI"] [Sat Feb 21 13:12:16.304549 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web-dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/web-dist/.env"] [unique_id "aZlo4BHl2U-jS0ZSEvYSZwAAAAM"] [Sat Feb 21 13:12:16.324298 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/web.config"] [unique_id "aZlo4DUKi5B2GfZ3HRGDCwAAAAg"] [Sat Feb 21 13:12:16.324929 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/web.config"] [unique_id "aZlo4DUKi5B2GfZ3HRGDCwAAAAg"] [Sat Feb 21 13:12:16.326009 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/web.config"] [unique_id "aZlo4DUKi5B2GfZ3HRGDCwAAAAg"] [Sat Feb 21 13:12:16.326053 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/web.config"] [unique_id "aZlo4DUKi5B2GfZ3HRGDCwAAAAg"] [Sat Feb 21 13:12:16.388260 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/Web/siteMariage/.env"] [unique_id "aZlo4IhPsHRVAc81jVCKVgAAAAY"] [Sat Feb 21 13:12:16.449908 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webroot_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/webroot_path/.env"] [unique_id "aZlo4BB7zWRWEp-p13p4YQAAAAU"] [Sat Feb 21 13:12:16.470989 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/website/.env"] [unique_id "aZlo4PkdT_IobDccX58WUQAAAAI"] [Sat Feb 21 13:12:16.489495 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /websocket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/websocket/.env"] [unique_id "aZlo4DcQ3FFpkVv1wBBhdQAAAAo"] [Sat Feb 21 13:12:16.508234 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webstatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/webstatic/.env"] [unique_id "aZlo4BHl2U-jS0ZSEvYSaAAAAAM"] [Sat Feb 21 13:12:16.528348 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/webui/.env"] [unique_id "aZlo4DUKi5B2GfZ3HRGDDAAAAAg"] [Sat Feb 21 13:12:16.547229 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/well-known/.env"] [unique_id "aZlo4OnNlyfrsrZbi4_vRwAAAAQ"] [Sat Feb 21 13:12:16.571820 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /whturk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/whturk/.env"] [unique_id "aZlo4IhPsHRVAc81jVCKVwAAAAY"] [Sat Feb 21 13:12:16.590973 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.2.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/windows/tests/9.2.x/.env"] [unique_id "aZlo4C3-_6b3eKRK8zI46wAAAAk"] [Sat Feb 21 13:12:16.609022 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.3.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/windows/tests/9.3.x/.env"] [unique_id "aZlo4AucuRjmpRitlBtLQAAAAAA"] [Sat Feb 21 13:12:16.627723 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wordpress/.env"] [unique_id "aZlo4BB7zWRWEp-p13p4YgAAAAU"] [Sat Feb 21 13:12:16.648293 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /workspace/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/workspace/.env"] [unique_id "aZlo4DcQ3FFpkVv1wBBhdgAAAAo"] [Sat Feb 21 13:12:16.667769 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-config.old"] [unique_id "aZlo4BHl2U-jS0ZSEvYSaQAAAAM"] [Sat Feb 21 13:12:16.668413 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.old"] [unique_id "aZlo4BHl2U-jS0ZSEvYSaQAAAAM"] [Sat Feb 21 13:12:16.690393 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php-backup"] [unique_id "aZlo4DUKi5B2GfZ3HRGDDQAAAAg"] [Sat Feb 21 13:12:16.708530 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php~"] [unique_id "aZlo4OnNlyfrsrZbi4_vSAAAAAQ"] [Sat Feb 21 13:12:16.726069 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.txt"] [unique_id "aZlo4IhPsHRVAc81jVCKWAAAAAY"] [Sat Feb 21 13:12:16.744331 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-content/.env"] [unique_id "aZlo4C3-_6b3eKRK8zI47AAAAAk"] [Sat Feb 21 13:12:16.764489 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/debug.log"] [unique_id "aZlo4AucuRjmpRitlBtLQQAAAAA"] [Sat Feb 21 13:12:16.804398 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-login/.env"] [unique_id "aZlo4DcQ3FFpkVv1wBBhdwAAAAo"] [Sat Feb 21 13:12:16.841835 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp/.env"] [unique_id "aZlo4NLbd4zJn3wkh3d4mQAAAAc"] [Sat Feb 21 13:12:16.880264 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www-data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/www-data/.env"] [unique_id "aZlo4OnNlyfrsrZbi4_vSQAAAAQ"] [Sat Feb 21 13:12:16.924751 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xx-final/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/xx-final/vue-heroes/.env"] [unique_id "aZlo4PkdT_IobDccX58WUwAAAAI"] [Sat Feb 21 13:12:16.999539 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /zmusic-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/zmusic-frontend/.env"] [unique_id "aZlo4AucuRjmpRitlBtLQgAAAAA"] [Sat Feb 21 13:12:17.018076 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/:443/.env"] [unique_id "aZlo4RB7zWRWEp-p13p4ZAAAAAU"] [Sat Feb 21 13:12:17.040826 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:80/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/:80/.env"] [unique_id "aZlo4TcQ3FFpkVv1wBBheAAAAAo"] [Sat Feb 21 13:12:17.063883 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8080/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/:8080/.env"] [unique_id "aZlo4RHl2U-jS0ZSEvYSawAAAAM"] [Sat Feb 21 13:12:17.083931 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8081/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/:8081/.env"] [unique_id "aZlo4dLbd4zJn3wkh3d4mgAAAAc"] [Sat Feb 21 13:12:17.105361 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/:8443/.env"] [unique_id "aZlo4TUKi5B2GfZ3HRGDDwAAAAg"] [Sat Feb 21 13:12:17.124072 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sendgrid_email/.env"] [unique_id "aZlo4enNlyfrsrZbi4_vSgAAAAQ"] [Sat Feb 21 13:12:17.146437 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.sendgrid"] [unique_id "aZlo4YhPsHRVAc81jVCKWgAAAAY"] [Sat Feb 21 13:12:17.887306 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/config/env/sendgrid_keys.env"] [unique_id "aZlo4TcQ3FFpkVv1wBBhfQAAAAo"] [Sat Feb 21 13:12:17.887353 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/config/env/sendgrid_keys.env"] [unique_id "aZlo4TcQ3FFpkVv1wBBhfQAAAAo"] [Sat Feb 21 13:12:18.189367 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php.orig"] [unique_id "aZlo4gucuRjmpRitlBtLSAAAAAA"] [Sat Feb 21 13:12:18.244831 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/configs/application.ini"] [unique_id "aZlo4hB7zWRWEp-p13p4awAAAAU"] [Sat Feb 21 13:12:18.692399 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/sources/api/.env"] [unique_id "aZlo4gucuRjmpRitlBtLSwAAAAA"] [Sat Feb 21 13:12:18.770017 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/api/.git/config"] [unique_id "aZlo4jcQ3FFpkVv1wBBhggAAAAo"] [Sat Feb 21 13:12:18.971116 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/drupal/coder/.git/info/refs"] [unique_id "aZlo4i3-_6b3eKRK8zI4-AAAAAk"] [Sat Feb 21 13:12:18.989926 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/drupal/coder/.git/info/exclude"] [unique_id "aZlo4ohPsHRVAc81jVCKZAAAAAY"] [Sat Feb 21 13:12:19.008637 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/drupal/coder/.git/objects/info"] [unique_id "aZlo4wucuRjmpRitlBtLTQAAAAA"] [Sat Feb 21 13:12:19.026946 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info/packs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/drupal/coder/.git/objects/info/packs"] [unique_id "aZlo4-nNlyfrsrZbi4_vVQAAAAQ"] [Sat Feb 21 13:12:19.046187 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/info.log"] [unique_id "aZlo4xHl2U-jS0ZSEvYSdgAAAAM"] [Sat Feb 21 13:12:19.143316 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZlo49Lbd4zJn3wkh3d4pQAAAAc"] [Sat Feb 21 13:12:19.145926 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZlo49Lbd4zJn3wkh3d4pQAAAAc"] [Sat Feb 21 13:12:19.146005 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZlo49Lbd4zJn3wkh3d4pQAAAAc"] [Sat Feb 21 13:12:19.163028 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/phpinfo.bak"] [unique_id "aZlo4y3-_6b3eKRK8zI4-QAAAAk"] [Sat Feb 21 13:12:19.578970 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-content/.git/config"] [unique_id "aZlo4xHl2U-jS0ZSEvYSeQAAAAM"] [Sat Feb 21 13:12:19.598080 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "aZlo4_kdT_IobDccX58WYQAAAAI"] [Sat Feb 21 13:12:19.617042 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-content/themes/.git/config"] [unique_id "aZlo4xB7zWRWEp-p13p4cwAAAAU"] [Sat Feb 21 13:12:19.635338 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-content/plugins/.git/config"] [unique_id "aZlo4y3-_6b3eKRK8zI4-wAAAAk"] [Sat Feb 21 13:12:19.656118 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/db.sql"] [unique_id "aZlo4zUKi5B2GfZ3HRGDHQAAAAg"] [Sat Feb 21 13:12:19.676485 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/mysql.sql"] [unique_id "aZlo49Lbd4zJn3wkh3d4qAAAAAc"] [Sat Feb 21 13:12:19.696641 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/dump.sql"] [unique_id "aZlo44hPsHRVAc81jVCKaAAAAAY"] [Sat Feb 21 13:12:19.716059 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/uploads/db.sql"] [unique_id "aZlo4wucuRjmpRitlBtLUQAAAAA"] [Sat Feb 21 13:12:19.735743 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/uploads/mysql.sql"] [unique_id "aZlo4zcQ3FFpkVv1wBBhhwAAAAo"] [Sat Feb 21 13:12:19.755108 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backup/db.sql"] [unique_id "aZlo4-nNlyfrsrZbi4_vWQAAAAQ"] [Sat Feb 21 13:12:19.773726 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backups/db.sql"] [unique_id "aZlo4xHl2U-jS0ZSEvYSegAAAAM"] [Sat Feb 21 13:12:19.793834 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/db_backup.sql"] [unique_id "aZlo4_kdT_IobDccX58WYgAAAAI"] [Sat Feb 21 13:12:19.813920 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZlo4y3-_6b3eKRK8zI4_AAAAAk"] [Sat Feb 21 13:12:19.834982 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backup/db_backup.sql"] [unique_id "aZlo4zUKi5B2GfZ3HRGDHgAAAAg"] [Sat Feb 21 13:12:19.855262 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/fullbackup.sql"] [unique_id "aZlo49Lbd4zJn3wkh3d4qQAAAAc"] [Sat Feb 21 13:12:19.874530 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/fullwebsite.sql"] [unique_id "aZlo44hPsHRVAc81jVCKaQAAAAY"] [Sat Feb 21 13:12:19.893647 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/data.sql"] [unique_id "aZlo4wucuRjmpRitlBtLUgAAAAA"] [Sat Feb 21 13:12:19.912303 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backup/data.sql"] [unique_id "aZlo4-nNlyfrsrZbi4_vWgAAAAQ"] [Sat Feb 21 13:12:19.931825 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/uploads/data.sql"] [unique_id "aZlo4xHl2U-jS0ZSEvYSewAAAAM"] [Sat Feb 21 13:12:19.950942 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backups/data.sql"] [unique_id "aZlo4_kdT_IobDccX58WYwAAAAI"] [Sat Feb 21 13:12:19.969891 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backup/database.sql"] [unique_id "aZlo4y3-_6b3eKRK8zI4_QAAAAk"] [Sat Feb 21 13:12:19.987893 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backups/database.sql"] [unique_id "aZlo4zUKi5B2GfZ3HRGDHwAAAAg"] [Sat Feb 21 13:12:20.007570 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/wordpress.sql"] [unique_id "aZlo5NLbd4zJn3wkh3d4qgAAAAc"] [Sat Feb 21 13:12:20.029995 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backups/wordpress.sql"] [unique_id "aZlo5IhPsHRVAc81jVCKagAAAAY"] [Sat Feb 21 13:12:20.052685 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/dbdump.sql"] [unique_id "aZlo5AucuRjmpRitlBtLUwAAAAA"] [Sat Feb 21 13:12:20.072428 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/uploads/dbdump.sql"] [unique_id "aZlo5BB7zWRWEp-p13p4dQAAAAU"] [Sat Feb 21 13:12:20.092456 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backups/dbdump.sql"] [unique_id "aZlo5OnNlyfrsrZbi4_vWwAAAAQ"] [Sat Feb 21 13:12:20.110194 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-content/backup/dbdump.sql"] [unique_id "aZlo5BHl2U-jS0ZSEvYSfAAAAAM"] [Sat Feb 21 13:12:20.128509 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wp-config.bak"] [unique_id "aZlo5PkdT_IobDccX58WZAAAAAI"] [Sat Feb 21 13:12:20.128870 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.bak"] [unique_id "aZlo5PkdT_IobDccX58WZAAAAAI"] [Sat Feb 21 13:12:20.175538 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.php.bak1"] [unique_id "aZlo5DUKi5B2GfZ3HRGDIAAAAAg"] [Sat Feb 21 13:12:20.194142 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wp-config.bak1"] [unique_id "aZlo5DcQ3FFpkVv1wBBhiQAAAAo"] [Sat Feb 21 13:12:20.493991 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/var/debug.log"] [unique_id "aZlo5C3-_6b3eKRK8zI5AAAAAAk"] [Sat Feb 21 13:12:20.513703 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/content/debug.log"] [unique_id "aZlo5DUKi5B2GfZ3HRGDIgAAAAg"] [Sat Feb 21 13:12:20.532735 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/npm-debug.log"] [unique_id "aZlo5DcQ3FFpkVv1wBBhiwAAAAo"] [Sat Feb 21 13:12:20.533069 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/npm-debug.log" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /npm-debug.log found within REQUEST_FILENAME: /npm-debug.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/npm-debug.log"] [unique_id "aZlo5DcQ3FFpkVv1wBBhiwAAAAo"] [Sat Feb 21 13:12:20.552607 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/yarn-debug.log"] [unique_id "aZlo5NLbd4zJn3wkh3d4rQAAAAc"] [Sat Feb 21 13:12:20.574035 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/firebase-debug.log"] [unique_id "aZlo5IhPsHRVAc81jVCKbQAAAAY"] [Sat Feb 21 13:12:20.674223 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/debug.sql"] [unique_id "aZlo5C3-_6b3eKRK8zI5AQAAAAk"] [Sat Feb 21 13:12:20.730943 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/mysql_debug.sql"] [unique_id "aZlo5DcQ3FFpkVv1wBBhjAAAAAo"] [Sat Feb 21 13:12:21.019153 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/config.inc"] [unique_id "aZlo5TUKi5B2GfZ3HRGDJQAAAAg"] [Sat Feb 21 13:12:21.156052 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/config/parameters.yml"] [unique_id "aZlo5enNlyfrsrZbi4_vYQAAAAQ"] [Sat Feb 21 13:12:21.174527 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/composer.json"] [unique_id "aZlo5S3-_6b3eKRK8zI5BAAAAAk"] [Sat Feb 21 13:12:21.251209 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/php.log"] [unique_id "aZlo5TcQ3FFpkVv1wBBhjwAAAAo"] [Sat Feb 21 13:12:21.269462 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/build.log"] [unique_id "aZlo5YhPsHRVAc81jVCKcQAAAAY"] [Sat Feb 21 13:12:21.538982 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/service.pwd"] [unique_id "aZlo5TUKi5B2GfZ3HRGDKAAAAAg"] [Sat Feb 21 13:12:21.613628 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app/etc/local.xml.bak"] [unique_id "aZlo5fkdT_IobDccX58WbAAAAAI"] [Sat Feb 21 13:12:21.631770 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/database.sql"] [unique_id "aZlo5RHl2U-jS0ZSEvYShAAAAAM"] [Sat Feb 21 13:12:21.650911 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/mysql.sql"] [unique_id "aZlo5QucuRjmpRitlBtLXAAAAAA"] [Sat Feb 21 13:12:21.670601 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/backup.sql"] [unique_id "aZlo5TcQ3FFpkVv1wBBhkQAAAAo"] [Sat Feb 21 13:12:21.689505 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/site.sql"] [unique_id "aZlo5S3-_6b3eKRK8zI5BwAAAAk"] [Sat Feb 21 13:12:21.707951 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/wordpress.sql"] [unique_id "aZlo5dLbd4zJn3wkh3d4swAAAAc"] [Sat Feb 21 13:12:21.768044 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/app_dev.php/_profiler/open"] [unique_id "aZlo5YhPsHRVAc81jVCKdAAAAAY"] [Sat Feb 21 13:12:21.789100 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/storage/oauth-private.key"] [unique_id "aZlo5enNlyfrsrZbi4_vZAAAAAQ"] [Sat Feb 21 13:12:21.807164 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/storage/oauth-public.key"] [unique_id "aZlo5fkdT_IobDccX58WbQAAAAI"] [Sat Feb 21 13:12:21.827234 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/storage/logs/stack.log"] [unique_id "aZlo5RHl2U-jS0ZSEvYShQAAAAM"] [Sat Feb 21 13:12:21.846344 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/storage/debug.log"] [unique_id "aZlo5QucuRjmpRitlBtLXQAAAAA"] [Sat Feb 21 13:12:22.331700 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/vendor/.env.example"] [unique_id "aZlo5unNlyfrsrZbi4_vZgAAAAQ"] [Sat Feb 21 13:12:22.407292 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/errors.log"] [unique_id "aZlo5vkdT_IobDccX58WcAAAAAI"] [Sat Feb 21 13:12:22.426171 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/config.old"] [unique_id "aZlo5hHl2U-jS0ZSEvYSiAAAAAM"] [Sat Feb 21 13:12:22.445512 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/export.sql"] [unique_id "aZlo5gucuRjmpRitlBtLYAAAAAA"] [Sat Feb 21 13:12:22.557801 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/sql.php"] [unique_id "aZlo5ohPsHRVAc81jVCKeAAAAAY"] [Sat Feb 21 13:12:22.557864 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/sql.php"] [unique_id "aZlo5ohPsHRVAc81jVCKeAAAAAY"] [Sat Feb 21 13:12:22.793360 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/database_backup.sql"] [unique_id "aZlo5gucuRjmpRitlBtLYgAAAAA"] [Sat Feb 21 13:12:22.938845 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/core/config.bak"] [unique_id "aZlo5hHl2U-jS0ZSEvYSiwAAAAM"] [Sat Feb 21 13:12:22.995898 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/wordpress/wp-config.php"] [unique_id "aZlo5i3-_6b3eKRK8zI5DgAAAAk"] [Sat Feb 21 13:12:23.033929 2026] [security2:error] [pid 1994661:tid 1994661] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.git/HEAD"] [unique_id "aZlo54hPsHRVAc81jVCKewAAAAY"] [Sat Feb 21 13:12:23.057897 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.svn/entries"] [unique_id "aZlo5xB7zWRWEp-p13p4hAAAAAU"] [Sat Feb 21 13:12:23.079115 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/hgrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.hg/hgrc"] [unique_id "aZlo5_kdT_IobDccX58WdAAAAAI"] [Sat Feb 21 13:12:23.226025 2026] [security2:error] [pid 1949603:tid 1949603] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/public.key"] [unique_id "aZlo5-nNlyfrsrZbi4_vagAAAAQ"] [Sat Feb 21 13:12:23.244514 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/ssl.key"] [unique_id "aZlo5xB7zWRWEp-p13p4hQAAAAU"] [Sat Feb 21 13:12:23.297974 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/selfsigned.key"] [unique_id "aZlo5wucuRjmpRitlBtLZQAAAAA"] [Sat Feb 21 13:12:23.315588 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/nginx.conf"] [unique_id "aZlo5zUKi5B2GfZ3HRGDMQAAAAg"] [Sat Feb 21 13:12:23.332959 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/httpd.conf"] [unique_id "aZlo5zcQ3FFpkVv1wBBhmgAAAAo"] [Sat Feb 21 13:12:23.486452 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/settings.ini"] [unique_id "aZlo5zUKi5B2GfZ3HRGDMgAAAAg"] [Sat Feb 21 13:12:23.579774 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/admin/settings.ini"] [unique_id "aZlo5xB7zWRWEp-p13p4hwAAAAU"] [Sat Feb 21 13:12:23.614873 2026] [security2:error] [pid 1926602:tid 1926602] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/admin/db.conf"] [unique_id "aZlo5xHl2U-jS0ZSEvYSjwAAAAM"] [Sat Feb 21 13:12:23.631705 2026] [security2:error] [pid 2001387:tid 2001387] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/admin/sql.conf"] [unique_id "aZlo5zUKi5B2GfZ3HRGDMwAAAAg"] [Sat Feb 21 13:12:23.652363 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/admin/.env.bak"] [unique_id "aZlo5zcQ3FFpkVv1wBBhnAAAAAo"] [Sat Feb 21 13:12:23.729181 2026] [security2:error] [pid 1988869:tid 1988869] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/private/secret.key"] [unique_id "aZlo5wucuRjmpRitlBtLZwAAAAA"] [Sat Feb 21 13:12:23.842899 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.well-known/.env"] [unique_id "aZlo5zcQ3FFpkVv1wBBhnQAAAAo"] [Sat Feb 21 13:12:23.961105 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/configuration.bak"] [unique_id "aZlo5_kdT_IobDccX58WeQAAAAI"] [Sat Feb 21 13:12:24.452268 2026] [security2:error] [pid 1992003:tid 1992003] [client 185.177.72.22:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "tech2tech.gr"] [uri "/.env.sh"] [unique_id "aZlo6BB7zWRWEp-p13p4jAAAAAU"] [Sat Feb 21 13:12:24.921846 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/install.sql"] [unique_id "aZlo6DcQ3FFpkVv1wBBhogAAAAo"] [Sat Feb 21 13:12:24.940586 2026] [security2:error] [pid 1985129:tid 1985129] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/update.sql"] [unique_id "aZlo6PkdT_IobDccX58WfQAAAAI"] [Sat Feb 21 13:12:24.962207 2026] [security2:error] [pid 1985392:tid 1985392] [client 185.177.72.22:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "tech2tech.gr"] [uri "/delete.sql"] [unique_id "aZlo6C3-_6b3eKRK8zI5GAAAAAk"] [Sat Feb 21 13:12:26.309339 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-global": Permission denied [hostname "tech2tech.gr"] [uri "/api/catalog/images"] [unique_id "aZlo6tLbd4zJn3wkh3d4xwAAAAc"] [Sat Feb 21 13:12:26.309418 2026] [security2:error] [pid 1960664:tid 1960664] [client 185.177.72.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/tech2tech-ip": Permission denied [hostname "tech2tech.gr"] [uri "/api/catalog/images"] [unique_id "aZlo6tLbd4zJn3wkh3d4xwAAAAc"] [Sat Feb 21 13:13:00.511623 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpDOnNlyfrsrZbi4_vmAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 13:13:00.511744 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpDOnNlyfrsrZbi4_vmAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 13:13:03.869341 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:13:06.743499 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpEgucuRjmpRitlBtLlQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Floop1 [Sat Feb 21 13:13:06.743566 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpEgucuRjmpRitlBtLlQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Floop1 [Sat Feb 21 13:13:28.398932 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpKDcQ3FFpkVv1wBBh0QAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:13:28.398993 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpKDcQ3FFpkVv1wBBh0QAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:13:53.339406 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpQTUKi5B2GfZ3HRGDdAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fsubsystem%2Fsda%2Fmq%2F4 [Sat Feb 21 13:13:53.339470 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpQTUKi5B2GfZ3HRGDdAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fsubsystem%2Fsda%2Fmq%2F4 [Sat Feb 21 13:14:04.874260 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:14:29.404282 2026] [security2:error] [pid 1988869:tid 1988869] [client 39.100.88.232:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlpXwucuRjmpRitlBtLvAAAAAA"] [Sat Feb 21 13:14:29.404391 2026] [security2:error] [pid 1988869:tid 1988869] [client 39.100.88.232:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZlpXwucuRjmpRitlBtLvAAAAAA"] [Sat Feb 21 13:15:04.063722 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlph9Lbd4zJn3wkh3d5IQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:15:04.063867 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlph9Lbd4zJn3wkh3d5IQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:15:19.298096 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlplzcQ3FFpkVv1wBBiCQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:15:19.298208 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlplzcQ3FFpkVv1wBBiCQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:15:25.130361 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpnRHl2U-jS0ZSEvYS_wAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:15:25.130462 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpnRHl2U-jS0ZSEvYS_wAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:15:58.821469 2026] [security2:error] [pid 1994661:tid 1994661] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZlpvYhPsHRVAc81jVCK-QAAAAY"] [Sat Feb 21 13:15:58.821560 2026] [security2:error] [pid 1994661:tid 1994661] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZlpvYhPsHRVAc81jVCK-QAAAAY"] [Sat Feb 21 13:16:08.359056 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpyBHl2U-jS0ZSEvYTFAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:16:08.359172 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlpyBHl2U-jS0ZSEvYTFAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:16:29.256102 2026] [security2:error] [pid 1985129:tid 1985129] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZlp3PkdT_IobDccX58XDAAAAAI"] [Sat Feb 21 13:16:29.256208 2026] [security2:error] [pid 1985129:tid 1985129] [client 65.52.160.249:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZlp3PkdT_IobDccX58XDAAAAAI"] [Sat Feb 21 13:16:45.572081 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlp7fkdT_IobDccX58XEwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:16:45.572206 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlp7fkdT_IobDccX58XEwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:16:54.818230 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlp9unNlyfrsrZbi4_wDgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:16:54.818318 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlp9unNlyfrsrZbi4_wDgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:17:22.893070 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqEohPsHRVAc81jVCLIQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 13:17:22.893155 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqEohPsHRVAc81jVCLIQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 13:17:47.615399 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqK9Lbd4zJn3wkh3d5cAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 13:17:47.615526 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqK9Lbd4zJn3wkh3d5cAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 13:18:00.560059 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqOBHl2U-jS0ZSEvYTRAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:18:00.560184 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqOBHl2U-jS0ZSEvYTRAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:18:26.018008 2026] [security2:error] [pid 1926602:tid 1926602] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.env"] [unique_id "aZlqUhHl2U-jS0ZSEvYTUgAAAAM"] [Sat Feb 21 13:18:26.360776 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqUi3-_6b3eKRK8zI51QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:18:26.360858 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqUi3-_6b3eKRK8zI51QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:18:28.905977 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqVBHl2U-jS0ZSEvYTUwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:18:28.906073 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqVBHl2U-jS0ZSEvYTUwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:18:31.361185 2026] [security2:error] [pid 1949603:tid 1949603] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.git/config"] [unique_id "aZlqV-nNlyfrsrZbi4_wPAAAAAQ"] [Sat Feb 21 13:18:33.404428 2026] [security2:error] [pid 1960664:tid 1960664] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/api/.env"] [unique_id "aZlqWdLbd4zJn3wkh3d5hwAAAAc"] [Sat Feb 21 13:18:34.238356 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqWhHl2U-jS0ZSEvYTVgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:18:34.238436 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqWhHl2U-jS0ZSEvYTVgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:18:44.096736 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:19:26.556652 2026] [security2:error] [pid 1960664:tid 1960664] [client 40.77.167.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlqjdLbd4zJn3wkh3d5nAAAAAc"] [Sat Feb 21 13:19:26.556744 2026] [security2:error] [pid 1960664:tid 1960664] [client 40.77.167.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlqjdLbd4zJn3wkh3d5nAAAAAc"] [Sat Feb 21 13:19:45.735447 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:19:48.109876 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqpBB7zWRWEp-p13p5bAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:19:48.109992 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqpBB7zWRWEp-p13p5bAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:20:09.056517 2026] [proxy_fcgi:error] [pid 2001387:tid 2001387] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.133772 2026] [proxy_fcgi:error] [pid 1960664:tid 1960664] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.170569 2026] [proxy_fcgi:error] [pid 1994661:tid 1994661] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.206057 2026] [proxy_fcgi:error] [pid 2002659:tid 2002659] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.241104 2026] [proxy_fcgi:error] [pid 1949603:tid 1949603] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.276721 2026] [proxy_fcgi:error] [pid 1988869:tid 1988869] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.312632 2026] [proxy_fcgi:error] [pid 1926602:tid 1926602] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.376522 2026] [proxy_fcgi:error] [pid 1985129:tid 1985129] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.417910 2026] [proxy_fcgi:error] [pid 2001387:tid 2001387] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.464821 2026] [proxy_fcgi:error] [pid 1960664:tid 1960664] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.525694 2026] [proxy_fcgi:error] [pid 1994661:tid 1994661] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.572773 2026] [proxy_fcgi:error] [pid 1992003:tid 1992003] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:09.613519 2026] [proxy_fcgi:error] [pid 1985392:tid 1985392] [client 158.158.51.6:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 13:20:26.035930 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqyQucuRjmpRitlBtMZAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:20:26.036019 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlqyQucuRjmpRitlBtMZAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:20:45.298891 2026] [security2:error] [pid 1949603:tid 1949603] [client 66.249.68.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlq3enNlyfrsrZbi4_weQAAAAQ"] [Sat Feb 21 13:20:45.298987 2026] [security2:error] [pid 1949603:tid 1949603] [client 66.249.68.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlq3enNlyfrsrZbi4_weQAAAAQ"] [Sat Feb 21 13:21:12.690611 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlq-OnNlyfrsrZbi4_whQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:21:12.690702 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlq-OnNlyfrsrZbi4_whQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:21:13.171199 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlq-RHl2U-jS0ZSEvYToAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:21:13.171284 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlq-RHl2U-jS0ZSEvYToAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:21:13.634658 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlq-QucuRjmpRitlBtMeAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6 [Sat Feb 21 13:21:13.634736 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlq-QucuRjmpRitlBtMeAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6 [Sat Feb 21 13:21:20.523606 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrADUKi5B2GfZ3HRGERQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 13:21:20.523678 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrADUKi5B2GfZ3HRGERQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 13:21:24.913942 2026] [security2:error] [pid 1949603:tid 1949603] [client 92.205.128.246:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZlrBOnNlyfrsrZbi4_wiQAAAAQ"] [Sat Feb 21 13:21:24.920274 2026] [security2:error] [pid 1992003:tid 1992003] [client 92.205.128.246:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/db/.env"] [unique_id "aZlrBBB7zWRWEp-p13p5lQAAAAU"] [Sat Feb 21 13:21:25.930354 2026] [security2:error] [pid 2002659:tid 2002659] [client 92.205.128.246:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZlrBTcQ3FFpkVv1wBBirQAAAAo"] [Sat Feb 21 13:21:25.931205 2026] [security2:error] [pid 1926602:tid 1926602] [client 92.205.128.246:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/db/.env"] [unique_id "aZlrBRHl2U-jS0ZSEvYTpgAAAAM"] [Sat Feb 21 13:22:00.091411 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrJxHl2U-jS0ZSEvYTswAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 13:22:00.091490 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrJxHl2U-jS0ZSEvYTswAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 13:22:03.715521 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrKxB7zWRWEp-p13p5pAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 13:22:03.715606 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrKxB7zWRWEp-p13p5pAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 13:22:45.960608 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrVS3-_6b3eKRK8zI6QgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:22:45.960736 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrVS3-_6b3eKRK8zI6QgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:22:48.040597 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:23:00.016783 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrYy3-_6b3eKRK8zI6SAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:23:00.016886 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrYy3-_6b3eKRK8zI6SAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:23:00.582836 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrZDcQ3FFpkVv1wBBi1QAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:23:00.582915 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrZDcQ3FFpkVv1wBBi1QAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:23:01.080234 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrZBB7zWRWEp-p13p5vQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:23:01.080317 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrZBB7zWRWEp-p13p5vQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:23:04.232253 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlraIhPsHRVAc81jVCLuAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 13:23:04.232334 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlraIhPsHRVAc81jVCLuAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 13:23:23.142511 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrewucuRjmpRitlBtMsAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fbdi [Sat Feb 21 13:23:23.142575 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrewucuRjmpRitlBtMsAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fbdi [Sat Feb 21 13:23:38.272631 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrijcQ3FFpkVv1wBBi5QAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 13:23:38.272693 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrijcQ3FFpkVv1wBBi5QAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 13:24:02.214059 2026] [security2:error] [pid 1926602:tid 1926602] [client 85.208.96.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "www.serversvalley.com"] [uri "/cgi-sys/ea-php74/cart.php"] [unique_id "aZlrohHl2U-jS0ZSEvYT6AAAAAM"] [Sat Feb 21 13:24:02.214153 2026] [security2:error] [pid 1926602:tid 1926602] [client 85.208.96.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "www.serversvalley.com"] [uri "/cgi-sys/ea-php74/cart.php"] [unique_id "aZlrohHl2U-jS0ZSEvYT6AAAAAM"] [Sat Feb 21 13:24:38.195925 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:24:38.571815 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrxjUKi5B2GfZ3HRGEmgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:24:38.571895 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrxjUKi5B2GfZ3HRGEmgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:24:39.575648 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrxy3-_6b3eKRK8zI6cwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:24:39.575764 2026] [security2:error] [pid 1985392:tid 1985392] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlrxy3-_6b3eKRK8zI6cwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:24:50.018571 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 85.203.23.6:0] AH01797: client denied by server configuration: /home/alliancechem/public_html/wp-content/uploads/wc-logs/ [Sat Feb 21 13:24:50.023809 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 85.203.23.6:0] AH01797: client denied by server configuration: /home/alliancechem/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 13:25:15.493356 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/error_log [Sat Feb 21 13:25:20.223741 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlr8PkdT_IobDccX58YAAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:25:20.223821 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlr8PkdT_IobDccX58YAAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:25:55.239812 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsE9Lbd4zJn3wkh3d6SAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:25:55.239916 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsE9Lbd4zJn3wkh3d6SAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 13:26:00.143919 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsGBB7zWRWEp-p13p6CwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fmq [Sat Feb 21 13:26:00.144018 2026] [security2:error] [pid 1992003:tid 1992003] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsGBB7zWRWEp-p13p6CwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fmq [Sat Feb 21 13:26:19.563851 2026] [access_compat:error] [pid 2001387:tid 2001387] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:26:25.933581 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsMRHl2U-jS0ZSEvYULgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 13:26:25.933659 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsMRHl2U-jS0ZSEvYULgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 13:26:31.325188 2026] [authz_core:error] [pid 1985129:tid 1985129] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-admin/includes/error_log [Sat Feb 21 13:26:34.919412 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsOhHl2U-jS0ZSEvYUNAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:26:34.919472 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsOhHl2U-jS0ZSEvYUNAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:26:41.218317 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/theme-compat/error_log [Sat Feb 21 13:26:44.963181 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsRBHl2U-jS0ZSEvYUOQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:26:44.963243 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsRBHl2U-jS0ZSEvYUOQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:26:49.448384 2026] [security2:error] [pid 1992003:tid 1992003] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlsSBB7zWRWEp-p13p6JAAAAAU"] [Sat Feb 21 13:26:49.448484 2026] [security2:error] [pid 1992003:tid 1992003] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlsSBB7zWRWEp-p13p6JAAAAAU"] [Sat Feb 21 13:26:59.534043 2026] [authz_core:error] [pid 1992003:tid 1992003] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/rest-api/error_log [Sat Feb 21 13:27:00.028490 2026] [authz_core:error] [pid 2001387:tid 2001387] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/widgets/error_log [Sat Feb 21 13:27:05.489141 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsWdLbd4zJn3wkh3d6cwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:27:05.489265 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsWdLbd4zJn3wkh3d6cwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:27:12.602906 2026] [authz_core:error] [pid 1926602:tid 1926602] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/sodium_compat/lib/error_log [Sat Feb 21 13:27:13.246336 2026] [security2:error] [pid 2001387:tid 2001387] [client 114.119.132.70:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within REQUEST_COOKIES:rfqtk_wp_session_a26785922b3516fe627bab9726c66e43: c8d62a06f93c029cdef385001bc24fe0||1774254430||1774362430"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "spotliteworld.com"] [uri "/product/gloves/"] [unique_id "aZlsYTUKi5B2GfZ3HRGE7gAAAAg"], referer: https://spotliteworld.com/product-category/gloves [Sat Feb 21 13:27:14.525314 2026] [authz_core:error] [pid 1994661:tid 1994661] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/rest-api/fields/error_log [Sat Feb 21 13:27:18.933043 2026] [authz_core:error] [pid 1926602:tid 1926602] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/IXR/error_log [Sat Feb 21 13:27:31.961305 2026] [security2:error] [pid 1992003:tid 1992003] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlschB7zWRWEp-p13p6RgAAAAU"] [Sat Feb 21 13:27:31.961384 2026] [security2:error] [pid 1992003:tid 1992003] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlschB7zWRWEp-p13p6RgAAAAU"] [Sat Feb 21 13:27:47.544186 2026] [security2:error] [pid 2001387:tid 2001387] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlsgTUKi5B2GfZ3HRGFBgAAAAg"] [Sat Feb 21 13:27:47.544314 2026] [security2:error] [pid 2001387:tid 2001387] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlsgTUKi5B2GfZ3HRGFBgAAAAg"] [Sat Feb 21 13:27:48.018239 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:27:48.032884 2026] [access_compat:error] [pid 2001387:tid 2001387] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:27:56.413245 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 40.70.244.161:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/plugins/fix/up.php [Sat Feb 21 13:27:57.242885 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 40.70.244.161:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/plugins/fix/up.php [Sat Feb 21 13:27:58.785649 2026] [security2:error] [pid 2001387:tid 2001387] [client 57.141.20.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZlsjjUKi5B2GfZ3HRGFDQAAAAg"] [Sat Feb 21 13:27:58.785722 2026] [security2:error] [pid 2001387:tid 2001387] [client 57.141.20.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZlsjjUKi5B2GfZ3HRGFDQAAAAg"] [Sat Feb 21 13:28:18.426907 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsojUKi5B2GfZ3HRGFGAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:28:18.427018 2026] [security2:error] [pid 2001387:tid 2001387] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlsojUKi5B2GfZ3HRGFGAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:28:43.537051 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/block-supports/error_log [Sat Feb 21 13:28:46.694713 2026] [security2:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-cron.php"] [unique_id "aZlsvYhPsHRVAc81jVCMcwAAAAY"], referer: http://alliancechem-eng.com/wp-cron.php?doing_wp_cron=1771662525.4529829025268554687500 [Sat Feb 21 13:28:46.694819 2026] [security2:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-cron.php"] [unique_id "aZlsvYhPsHRVAc81jVCMcwAAAAY"], referer: http://alliancechem-eng.com/wp-cron.php?doing_wp_cron=1771662525.4529829025268554687500 [Sat Feb 21 13:28:50.017477 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlswdLbd4zJn3wkh3d6ugAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:28:50.017578 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlswdLbd4zJn3wkh3d6ugAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:28:57.462534 2026] [access_compat:error] [pid 1926602:tid 1926602] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:29:12.465564 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:29:12.487168 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/twentytwentytwo/index.php [Sat Feb 21 13:29:14.567368 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/twentytwentytwo/index.php [Sat Feb 21 13:29:14.567800 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/twentytwentytwo/index.php5 [Sat Feb 21 13:29:14.568665 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/twentytwentytwo/index.phtml [Sat Feb 21 13:29:22.926408 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls4jcQ3FFpkVv1wBBjowAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:29:22.926564 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls4jcQ3FFpkVv1wBBjowAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:29:23.924112 2026] [access_compat:error] [pid 2001387:tid 2001387] [client 85.203.23.6:0] AH01797: client denied by server configuration: /home/alliancechem/public_html/wp-content/uploads/woocommerce_uploads/about.php [Sat Feb 21 13:29:27.499074 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls5-nNlyfrsrZbi4_xgwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 13:29:27.499176 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls5-nNlyfrsrZbi4_xgwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 13:29:36.041949 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls79Lbd4zJn3wkh3d61gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:29:36.042055 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls79Lbd4zJn3wkh3d61gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:29:36.924104 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls8AucuRjmpRitlBtNhgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:29:36.924171 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZls8AucuRjmpRitlBtNhgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:29:38.566220 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/admin.php [Sat Feb 21 13:29:39.366068 2026] [authz_core:error] [pid 2009550:tid 2009550] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/sodium_compat/namespaced/Core/error_log [Sat Feb 21 13:29:45.041876 2026] [authz_core:error] [pid 2002659:tid 2002659] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-content/plugins/akismet/_40.php [Sat Feb 21 13:29:50.185591 2026] [authz_core:error] [pid 2001387:tid 2001387] [client 85.203.23.6:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/rest-api/endpoints/error_log [Sat Feb 21 13:29:55.540694 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltAzcQ3FFpkVv1wBBjswAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq%2F1 [Sat Feb 21 13:29:55.540761 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltAzcQ3FFpkVv1wBBjswAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq%2F1 [Sat Feb 21 13:29:56.837334 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltBIhPsHRVAc81jVCMlwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 13:29:56.837405 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltBIhPsHRVAc81jVCMlwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 13:29:58.383485 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:30:30.791616 2026] [security2:error] [pid 1949603:tid 1949603] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZltJOnNlyfrsrZbi4_xogAAAAQ"] [Sat Feb 21 13:30:30.791712 2026] [security2:error] [pid 1949603:tid 1949603] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZltJOnNlyfrsrZbi4_xogAAAAQ"] [Sat Feb 21 13:30:58.071732 2026] [security2:error] [pid 1985129:tid 1985129] [client 40.77.167.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZltQPkdT_IobDccX58YvgAAAAI"] [Sat Feb 21 13:30:58.071809 2026] [security2:error] [pid 1985129:tid 1985129] [client 40.77.167.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZltQPkdT_IobDccX58YvgAAAAI"] [Sat Feb 21 13:31:03.203572 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:31:59.962530 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/plugins/index.php [Sat Feb 21 13:32:03.033972 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/plugins/index.php [Sat Feb 21 13:32:03.034390 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/plugins/index.php5 [Sat Feb 21 13:32:03.035002 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/plugins/index.phtml [Sat Feb 21 13:32:07.857190 2026] [security2:error] [pid 1926602:tid 1926602] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlthRHl2U-jS0ZSEvYU_wAAAAM"] [Sat Feb 21 13:32:07.857464 2026] [security2:error] [pid 1926602:tid 1926602] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZlthRHl2U-jS0ZSEvYU_wAAAAM"] [Sat Feb 21 13:32:13.959857 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/redpenguinit/public_html/wp-content/uploads/wc-logs/, referer: binance.com [Sat Feb 21 13:32:13.963774 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/redpenguinit/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 13:32:22.525828 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 104.46.226.22:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/plugins/admin.php [Sat Feb 21 13:32:35.020003 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltounNlyfrsrZbi4_x6gAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 13:32:35.020074 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltounNlyfrsrZbi4_x6gAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 13:32:38.520903 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:32:43.142646 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltq4hPsHRVAc81jVCM8AAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:32:43.142739 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltq4hPsHRVAc81jVCM8AAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:32:48.461722 2026] [security2:error] [pid 1988869:tid 1988869] [client 134.209.254.170:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "37.60.246.33"] [uri "/sdk"] [unique_id "aZltsAucuRjmpRitlBtN7AAAAAA"] [Sat Feb 21 13:32:49.507715 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 13:32:50.348152 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltspmrwNtK8g_1R7xNZwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:32:50.348245 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZltspmrwNtK8g_1R7xNZwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:32:54.702955 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:32:58.580940 2026] [authz_core:error] [pid 2002659:tid 2002659] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-admin/maint/error_log, referer: binance.com [Sat Feb 21 13:33:10.879168 2026] [security2:error] [pid 2002659:tid 2002659] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZltxTcQ3FFpkVv1wBBkIAAAAAo"] [Sat Feb 21 13:33:10.879237 2026] [security2:error] [pid 2002659:tid 2002659] [client 85.203.23.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZltxTcQ3FFpkVv1wBBkIAAAAAo"] [Sat Feb 21 13:33:13.722536 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:33:38.908501 2026] [security2:error] [pid 1926602:tid 1926602] [client 104.28.225.14:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-global": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZlt4RHl2U-jS0ZSEvYVMQAAAAM"] [Sat Feb 21 13:33:38.908638 2026] [security2:error] [pid 1926602:tid 1926602] [client 104.28.225.14:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-ip": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZlt4RHl2U-jS0ZSEvYVMQAAAAM"] [Sat Feb 21 13:33:39.552074 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:33:47.066905 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlt6pmrwNtK8g_1R7xNhgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:33:47.066997 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlt6pmrwNtK8g_1R7xNhgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:33:52.338685 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 13:33:57.320754 2026] [authz_core:error] [pid 1926602:tid 1926602] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 13:34:13.130150 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluBenNlyfrsrZbi4_yIAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:34:13.130225 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluBenNlyfrsrZbi4_yIAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:34:21.486945 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluDRHl2U-jS0ZSEvYVSAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:34:21.487031 2026] [security2:error] [pid 1926602:tid 1926602] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluDRHl2U-jS0ZSEvYVSAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:34:29.596089 2026] [security2:error] [pid 2012011:tid 2012011] [client 185.93.89.136:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.testthree.onebox.pk"] [uri "/.env"] [unique_id "aZluFS_6Hqts6s-LNdAjmgAAAAk"] [Sat Feb 21 13:34:32.835318 2026] [authz_core:error] [pid 2009550:tid 2009550] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 13:34:38.865588 2026] [autoindex:error] [pid 2009550:tid 2009550] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:35:05.314907 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:35:05.546570 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:35:06.845436 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:35:07.146982 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluO4hPsHRVAc81jVCNNwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:35:07.147044 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluO4hPsHRVAc81jVCNNwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 13:35:07.846736 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:35:17.853473 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluRenNlyfrsrZbi4_yPQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 13:35:17.853590 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluRenNlyfrsrZbi4_yPQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 13:35:18.126298 2026] [authz_core:error] [pid 1960664:tid 1960664] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 13:35:41.190294 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluXYhPsHRVAc81jVCNSAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:35:41.190366 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluXYhPsHRVAc81jVCNSAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:35:42.224092 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluXi_6Hqts6s-LNdAjwQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:35:42.224231 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluXi_6Hqts6s-LNdAjwQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:35:44.771127 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluYJmrwNtK8g_1R7xNwgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:35:44.771188 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluYJmrwNtK8g_1R7xNwgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:36:19.195426 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 13:36:20.491394 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 13:36:20.491861 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php5 [Sat Feb 21 13:36:20.492775 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.phtml [Sat Feb 21 13:36:30.739943 2026] [security2:error] [pid 1949603:tid 1949603] [client 4.213.99.137:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlujenNlyfrsrZbi4_yYgAAAAQ"] [Sat Feb 21 13:36:30.740038 2026] [security2:error] [pid 1949603:tid 1949603] [client 4.213.99.137:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlujenNlyfrsrZbi4_yYgAAAAQ"] [Sat Feb 21 13:36:30.931023 2026] [autoindex:error] [pid 2002659:tid 2002659] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:36:39.502215 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluly_6Hqts6s-LNdAj3QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:36:39.502306 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluly_6Hqts6s-LNdAj3QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:36:42.972070 2026] [security2:error] [pid 2002659:tid 2002659] [client 80.13.153.140:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.git/index"] [unique_id "aZlumjcQ3FFpkVv1wBBkjgAAAAo"] [Sat Feb 21 13:36:44.058950 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/about.php [Sat Feb 21 13:36:47.084243 2026] [autoindex:error] [pid 1985129:tid 1985129] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:36:52.011623 2026] [security2:error] [pid 2012077:tid 2012077] [client 4.213.99.137:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZluolQdZ64h20JcCSo0cQAAAAs"] [Sat Feb 21 13:36:52.011691 2026] [security2:error] [pid 2012077:tid 2012077] [client 4.213.99.137:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZluolQdZ64h20JcCSo0cQAAAAs"] [Sat Feb 21 13:36:56.937109 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluqPkdT_IobDccX58ZewAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:36:56.937191 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZluqPkdT_IobDccX58ZewAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:37:01.168938 2026] [autoindex:error] [pid 2009550:tid 2009550] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:37:03.883108 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlur1QdZ64h20JcCSo0dwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:37:03.883231 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlur1QdZ64h20JcCSo0dwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:37:07.706279 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:37:13.215663 2026] [autoindex:error] [pid 2012077:tid 2012077] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:37:18.058687 2026] [autoindex:error] [pid 1960664:tid 1960664] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:37:22.881831 2026] [autoindex:error] [pid 2012840:tid 2012840] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:37:29.636913 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/admin.php [Sat Feb 21 13:37:31.409167 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.php [Sat Feb 21 13:37:32.810621 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.php [Sat Feb 21 13:37:32.810986 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.php5 [Sat Feb 21 13:37:32.811783 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 4.213.99.137:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.phtml [Sat Feb 21 13:38:08.779646 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:38:13.302068 2026] [security2:error] [pid 1985129:tid 1985129] [client 4.213.99.137:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlu9PkdT_IobDccX58ZoAAAAAI"] [Sat Feb 21 13:38:13.302145 2026] [security2:error] [pid 1985129:tid 1985129] [client 4.213.99.137:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlu9PkdT_IobDccX58ZoAAAAAI"] [Sat Feb 21 13:38:19.447652 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlu--nNlyfrsrZbi4_ylwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:38:19.447748 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlu--nNlyfrsrZbi4_ylwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:38:29.477797 2026] [security2:error] [pid 1985129:tid 1985129] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/.well-known/"] [unique_id "aZlvBfkdT_IobDccX58ZqAAAAAI"], referer: binance.com [Sat Feb 21 13:38:29.477875 2026] [security2:error] [pid 1985129:tid 1985129] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/.well-known/"] [unique_id "aZlvBfkdT_IobDccX58ZqAAAAAI"], referer: binance.com [Sat Feb 21 13:38:35.784761 2026] [autoindex:error] [pid 1988869:tid 1988869] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:38:36.663103 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvDIhPsHRVAc81jVCNnQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:38:36.663223 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvDIhPsHRVAc81jVCNnQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:38:39.001291 2026] [autoindex:error] [pid 2009550:tid 2009550] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:38:49.660713 2026] [security2:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/index.php"] [unique_id "aZlvGS_6Hqts6s-LNdAkFgAAAAk"], referer: binance.com [Sat Feb 21 13:38:49.660786 2026] [security2:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/index.php"] [unique_id "aZlvGS_6Hqts6s-LNdAkFgAAAAk"], referer: binance.com [Sat Feb 21 13:38:54.663876 2026] [autoindex:error] [pid 1994661:tid 1994661] [client 4.213.99.137:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:38:55.524354 2026] [security2:error] [pid 2012840:tid 2012840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvH746EmVkKmvJBMfOAAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:38:55.524477 2026] [security2:error] [pid 2012840:tid 2012840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvH746EmVkKmvJBMfOAAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:39:39.123173 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:40:32.773177 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvgOnNlyfrsrZbi4_y0QAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:40:32.773335 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvgOnNlyfrsrZbi4_y0QAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:40:49.536697 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvkS_6Hqts6s-LNdAkSAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fmq%2F5 [Sat Feb 21 13:40:49.536915 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvkS_6Hqts6s-LNdAkSAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fmq%2F5 [Sat Feb 21 13:40:50.574960 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvkunNlyfrsrZbi4_y2AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsda3 [Sat Feb 21 13:40:50.575017 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvkunNlyfrsrZbi4_y2AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsda3 [Sat Feb 21 13:40:58.488441 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:41:11.843480 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 103.186.31.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/file.php [Sat Feb 21 13:41:22.629756 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvsjcQ3FFpkVv1wBBlDAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:41:22.629922 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlvsjcQ3FFpkVv1wBBlDAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:42:07.738395 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:42:16.407827 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlv6NLbd4zJn3wkh3d8UAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fmq%2F6 [Sat Feb 21 13:42:16.407983 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlv6NLbd4zJn3wkh3d8UAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fmq%2F6 [Sat Feb 21 13:42:36.898941 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlv_OnNlyfrsrZbi4_zBgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fpower [Sat Feb 21 13:42:36.899025 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlv_OnNlyfrsrZbi4_zBgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fpower [Sat Feb 21 13:42:50.093471 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/9.php [Sat Feb 21 13:42:50.124798 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/70.php [Sat Feb 21 13:42:50.159645 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/y.php [Sat Feb 21 13:42:50.421353 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/yas.php [Sat Feb 21 13:42:50.453102 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/19.php [Sat Feb 21 13:42:50.486592 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/86.php [Sat Feb 21 13:42:50.525009 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/v.php [Sat Feb 21 13:42:50.562582 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/i.php [Sat Feb 21 13:42:50.592971 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/66.php [Sat Feb 21 13:42:50.623612 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/p.php [Sat Feb 21 13:42:50.661303 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/t.php [Sat Feb 21 13:42:50.698844 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/e.php [Sat Feb 21 13:42:50.729279 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.100.192.217:0] AH01797: client denied by server configuration: /home/masterco/public_html/5.php [Sat Feb 21 13:43:09.474408 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:43:36.642862 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwODcQ3FFpkVv1wBBlQwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:43:36.642942 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwODcQ3FFpkVv1wBBlQwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:43:42.915028 2026] [security2:error] [pid 2012840:tid 2012840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwPr46EmVkKmvJBMfOfgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:43:42.915163 2026] [security2:error] [pid 2012840:tid 2012840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwPr46EmVkKmvJBMfOfgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:43:46.842339 2026] [security2:error] [pid 2012840:tid 2012840] [client 65.21.109.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/groopview-global": Permission denied [hostname "groopview.com"] [uri "/index.php"] [unique_id "aZlwQr46EmVkKmvJBMfOgAAAAAU"] [Sat Feb 21 13:43:46.842402 2026] [security2:error] [pid 2012840:tid 2012840] [client 65.21.109.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/groopview-ip": Permission denied [hostname "groopview.com"] [uri "/index.php"] [unique_id "aZlwQr46EmVkKmvJBMfOgAAAAAU"] [Sat Feb 21 13:44:24.881007 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwaNLbd4zJn3wkh3d8iAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 13:44:24.881981 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwaNLbd4zJn3wkh3d8iAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 13:44:33.793001 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwcQucuRjmpRitlBtPOAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsda3 [Sat Feb 21 13:44:33.793060 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwcQucuRjmpRitlBtPOAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsda3 [Sat Feb 21 13:44:39.153382 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:45:27.088686 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwpi_6Hqts6s-LNdAkvAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 13:45:27.088762 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwpi_6Hqts6s-LNdAkvAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 13:45:35.486448 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwrwucuRjmpRitlBtPVQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 13:45:35.486531 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwrwucuRjmpRitlBtPVQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 13:45:40.302623 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:45:56.623479 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwxDcQ3FFpkVv1wBBlhAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:45:56.623561 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwxDcQ3FFpkVv1wBBlhAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:06.213312 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwzgucuRjmpRitlBtPZwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:06.213422 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlwzgucuRjmpRitlBtPZwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:12.835381 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/system.php [Sat Feb 21 13:46:13.224182 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ini.php [Sat Feb 21 13:46:16.134298 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/elp.php [Sat Feb 21 13:46:16.549580 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/FII.php [Sat Feb 21 13:46:17.652312 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/bolt.php [Sat Feb 21 13:46:18.079509 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/api.php [Sat Feb 21 13:46:18.824138 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/mini.php [Sat Feb 21 13:46:19.576459 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/dropdown.php [Sat Feb 21 13:46:20.335752 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-file.php [Sat Feb 21 13:46:21.144084 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/alfa-rex.php [Sat Feb 21 13:46:22.063207 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlw3fkdT_IobDccX58ahwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:46:22.063274 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlw3fkdT_IobDccX58ahwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:46:23.777976 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/abcd.php [Sat Feb 21 13:46:24.485756 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/lib.php [Sat Feb 21 13:46:26.657128 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/shell.php [Sat Feb 21 13:46:27.348386 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ds.php [Sat Feb 21 13:46:27.696177 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/makeasmtp.php [Sat Feb 21 13:46:28.073683 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/.well-known/acme-challenge/file.php [Sat Feb 21 13:46:28.824668 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/buy.php [Sat Feb 21 13:46:29.754947 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/theme.php [Sat Feb 21 13:46:30.233407 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/chosen.php [Sat Feb 21 13:46:31.050341 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/st.php [Sat Feb 21 13:46:31.614974 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/inputs.php [Sat Feb 21 13:46:32.705944 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/aaa.php [Sat Feb 21 13:46:34.955236 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-signup.php [Sat Feb 21 13:46:35.367370 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/core.php [Sat Feb 21 13:46:35.975391 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/403.php [Sat Feb 21 13:46:36.683736 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/new4.php [Sat Feb 21 13:46:37.162989 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/adminfuns.php [Sat Feb 21 13:46:41.086019 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlw8PkdT_IobDccX58amgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:41.086309 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlw8PkdT_IobDccX58amgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:41.541105 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/sim.php [Sat Feb 21 13:46:42.368594 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/error.php [Sat Feb 21 13:46:43.153826 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/cong.php [Sat Feb 21 13:46:46.012659 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/kyami.php [Sat Feb 21 13:46:47.615317 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/1.php [Sat Feb 21 13:46:48.834280 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/gecko-new.php [Sat Feb 21 13:46:50.450755 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-blog-header.php [Sat Feb 21 13:46:51.438238 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/item.php [Sat Feb 21 13:46:51.796426 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/xmrlpc.php [Sat Feb 21 13:46:52.274457 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/config.php [Sat Feb 21 13:46:52.993445 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/cc.php [Sat Feb 21 13:46:54.487630 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlw_i_6Hqts6s-LNdAlBAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:54.487698 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlw_i_6Hqts6s-LNdAlBAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:54.601867 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-conflg.php [Sat Feb 21 13:46:55.000163 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/themes.php [Sat Feb 21 13:46:55.383843 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/hplfuns.php [Sat Feb 21 13:46:55.384447 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlw_y_6Hqts6s-LNdAlBQAAAAk"] [Sat Feb 21 13:46:55.384485 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlw_y_6Hqts6s-LNdAlBQAAAAk"] [Sat Feb 21 13:46:56.650270 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxAPkdT_IobDccX58aqQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:56.650394 2026] [security2:error] [pid 1985129:tid 1985129] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxAPkdT_IobDccX58aqQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 13:46:56.767164 2026] [security2:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/admin.php"] [unique_id "aZlxAIhPsHRVAc81jVCOlwAAAAY"] [Sat Feb 21 13:46:56.767301 2026] [security2:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/admin.php"] [unique_id "aZlxAIhPsHRVAc81jVCOlwAAAAY"] [Sat Feb 21 13:46:57.127697 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/alfa.php [Sat Feb 21 13:46:57.918686 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-2019.php [Sat Feb 21 13:46:59.038782 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/akcc.php [Sat Feb 21 13:46:59.039393 2026] [security2:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlxA4hPsHRVAc81jVCOmgAAAAY"] [Sat Feb 21 13:46:59.039444 2026] [security2:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlxA4hPsHRVAc81jVCOmgAAAAY"] [Sat Feb 21 13:46:59.232275 2026] [security2:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/404.php"] [unique_id "aZlxAzcQ3FFpkVv1wBBluAAAAAo"] [Sat Feb 21 13:46:59.232378 2026] [security2:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/404.php"] [unique_id "aZlxAzcQ3FFpkVv1wBBluAAAAAo"] [Sat Feb 21 13:46:59.413853 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/404.php [Sat Feb 21 13:47:00.439583 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-corn-sample.php [Sat Feb 21 13:47:00.810025 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/classwithtostring.php [Sat Feb 21 13:47:01.323228 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ab.php [Sat Feb 21 13:47:01.802908 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxBVQdZ64h20JcCSo1qAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 13:47:01.802964 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxBVQdZ64h20JcCSo1qAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 13:47:02.437078 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/asasx.php [Sat Feb 21 13:47:04.495440 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxCJmrwNtK8g_1R7xPGwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:47:04.495510 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxCJmrwNtK8g_1R7xPGwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:47:04.827613 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/fox.php [Sat Feb 21 13:47:06.060450 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/moon.php [Sat Feb 21 13:47:06.406508 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/mar.php [Sat Feb 21 13:47:07.120899 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxC5mrwNtK8g_1R7xPHgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:47:07.120983 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxC5mrwNtK8g_1R7xPHgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:47:07.341333 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aZlxC1QdZ64h20JcCSo1rQAAAAs"] [Sat Feb 21 13:47:07.341414 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aZlxC1QdZ64h20JcCSo1rQAAAAs"] [Sat Feb 21 13:47:09.393015 2026] [security2:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "mail.arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlxDC_6Hqts6s-LNdAlFAAAAAk"] [Sat Feb 21 13:47:09.393076 2026] [security2:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "mail.arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlxDC_6Hqts6s-LNdAlFAAAAAk"] [Sat Feb 21 13:47:10.446011 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/class-php [Sat Feb 21 13:47:11.259837 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/install.php [Sat Feb 21 13:47:11.656930 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/menu.php [Sat Feb 21 13:47:15.783569 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/defaults.php [Sat Feb 21 13:47:16.992613 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/css.php [Sat Feb 21 13:47:17.349310 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:47:17.781243 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-links-opml.php [Sat Feb 21 13:47:19.779648 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/123.php [Sat Feb 21 13:47:20.163844 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/log.php [Sat Feb 21 13:47:20.960464 2026] [authz_core:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01630: client denied by server configuration: /home/advertwisely/public_html/wp-content [Sat Feb 21 13:47:22.080553 2026] [negotiation:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH00687: Negotiation: discovered file(s) matching request: /home/advertwisely/public_html/mah (None could be negotiated). [Sat Feb 21 13:47:22.460281 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/as.php [Sat Feb 21 13:47:23.984049 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/style.php [Sat Feb 21 13:47:24.333543 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/aa.php [Sat Feb 21 13:47:24.710425 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/hehehehe.php [Sat Feb 21 13:47:25.409827 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/x.php [Sat Feb 21 13:47:26.012980 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-links.php [Sat Feb 21 13:47:27.273902 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/main.php [Sat Feb 21 13:47:27.278598 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 13:47:27.980693 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wso.php [Sat Feb 21 13:47:28.400055 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-configs.php [Sat Feb 21 13:47:28.488406 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 40.80.90.214:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 13:47:28.488691 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 40.80.90.214:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php5 [Sat Feb 21 13:47:28.489191 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 40.80.90.214:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.phtml [Sat Feb 21 13:47:28.836977 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/lock.php [Sat Feb 21 13:47:29.191050 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/file.php [Sat Feb 21 13:47:30.052666 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-trackback.php [Sat Feb 21 13:47:30.053326 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlxIi_6Hqts6s-LNdAlKAAAAAk"] [Sat Feb 21 13:47:30.053374 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/403.shtml"] [unique_id "aZlxIi_6Hqts6s-LNdAlKAAAAAk"] [Sat Feb 21 13:47:30.399528 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/app.php [Sat Feb 21 13:47:31.158562 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/simple.php [Sat Feb 21 13:47:31.916719 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/bless.php [Sat Feb 21 13:47:32.755550 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ava.php [Sat Feb 21 13:47:35.289445 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/ioxi-o.php [Sat Feb 21 13:47:35.709460 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/1index.php [Sat Feb 21 13:47:36.839037 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/file2.php [Sat Feb 21 13:47:37.336705 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/default.php [Sat Feb 21 13:47:38.137982 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/xml.php [Sat Feb 21 13:47:38.492461 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/sx.php [Sat Feb 21 13:47:39.653374 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-cron.php [Sat Feb 21 13:47:40.871383 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxLJmrwNtK8g_1R7xPPAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:47:40.871460 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxLJmrwNtK8g_1R7xPPAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 13:47:41.929367 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/backup.php [Sat Feb 21 13:47:42.282018 2026] [authz_core:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01630: client denied by server configuration: /home/advertwisely/public_html/images [Sat Feb 21 13:47:42.684827 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-admin.php [Sat Feb 21 13:47:43.074558 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/akc.php [Sat Feb 21 13:47:44.213323 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/test1.php [Sat Feb 21 13:47:44.563487 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/bolt.php [Sat Feb 21 13:47:44.928171 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/help.php [Sat Feb 21 13:47:45.320323 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/atomlib.php [Sat Feb 21 13:47:45.671809 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-good.php [Sat Feb 21 13:47:46.062677 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/gecko.php [Sat Feb 21 13:47:46.832751 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/news.php [Sat Feb 21 13:47:47.178337 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/xmlrpc.php [Sat Feb 21 13:47:47.521608 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/new.php [Sat Feb 21 13:47:50.904749 2026] [access_compat:error] [pid 2012840:tid 2012840] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/server.php [Sat Feb 21 13:47:51.258352 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp-signin.php [Sat Feb 21 13:47:52.792371 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/class.php [Sat Feb 21 13:47:53.137103 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/wp.php [Sat Feb 21 13:47:55.245791 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 20.197.25.32:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/special.php [Sat Feb 21 13:47:56.432913 2026] [security2:error] [pid 2012840:tid 2012840] [client 157.55.39.11:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZlxPL46EmVkKmvJBMfPOAAAAAU"] [Sat Feb 21 13:47:58.141122 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxPgucuRjmpRitlBtPzQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:47:58.141187 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxPgucuRjmpRitlBtPzQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:48:07.727665 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxRy_6Hqts6s-LNdAlRgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:48:07.727782 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxRy_6Hqts6s-LNdAlRgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:48:18.602763 2026] [security2:error] [pid 2012077:tid 2012077] [client 169.150.203.197:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/xmlrpc.php"] [unique_id "aZlxUVQdZ64h20JcCSo16gAAAAs"] [Sat Feb 21 13:48:18.602843 2026] [security2:error] [pid 2012077:tid 2012077] [client 169.150.203.197:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/xmlrpc.php"] [unique_id "aZlxUVQdZ64h20JcCSo16gAAAAs"] [Sat Feb 21 13:48:21.281016 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:48:36.856365 2026] [authz_core:error] [pid 1985129:tid 1985129] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/technicaltesting/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 13:48:42.001656 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxaZmrwNtK8g_1R7xPYAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:48:42.001742 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxaZmrwNtK8g_1R7xPYAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 13:48:44.454097 2026] [security2:error] [pid 2012011:tid 2012011] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlxbC_6Hqts6s-LNdAlXAAAAAk"] [Sat Feb 21 13:48:44.454233 2026] [security2:error] [pid 2012011:tid 2012011] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZlxbC_6Hqts6s-LNdAlXAAAAAk"] [Sat Feb 21 13:48:52.084829 2026] [autoindex:error] [pid 1988869:tid 1988869] [client 40.80.90.214:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:49:07.187911 2026] [autoindex:error] [pid 1994661:tid 1994661] [client 40.80.90.214:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:49:08.504961 2026] [autoindex:error] [pid 2012840:tid 2012840] [client 40.80.90.214:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:49:10.258840 2026] [autoindex:error] [pid 2002659:tid 2002659] [client 40.80.90.214:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:49:15.990372 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "mail.arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlxiunNlyfrsrZbi4_z9AAAAAQ"] [Sat Feb 21 13:49:15.990431 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "mail.arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlxiunNlyfrsrZbi4_z9AAAAAQ"] [Sat Feb 21 13:49:37.644917 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxoYhPsHRVAc81jVCPBwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:49:37.645076 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxoYhPsHRVAc81jVCPBwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:49:43.072326 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 40.80.90.214:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/about.php [Sat Feb 21 13:49:55.575136 2026] [negotiation:error] [pid 2002659:tid 2002659] (13)Permission denied: [client 206.189.195.203:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/, referer: http://247reactionpower.com/cgi-sys/suspendedpage.cgi [Sat Feb 21 13:49:58.660239 2026] [negotiation:error] [pid 2012840:tid 2012840] (13)Permission denied: [client 206.189.195.203:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/, referer: https://247reactionpower.com/cgi-sys/suspendedpage.cgi [Sat Feb 21 13:50:04.985532 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxvOnNlyfrsrZbi4_0DgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:50:04.985615 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlxvOnNlyfrsrZbi4_0DgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 13:50:16.876097 2026] [security2:error] [pid 2009550:tid 2009550] [client 47.82.11.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlxx5mrwNtK8g_1R7xPlQAAAAE"], referer: http://rentacarkarachi.com/ [Sat Feb 21 13:50:16.876192 2026] [security2:error] [pid 2009550:tid 2009550] [client 47.82.11.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlxx5mrwNtK8g_1R7xPlQAAAAE"], referer: http://rentacarkarachi.com/ [Sat Feb 21 13:50:26.160462 2026] [security2:error] [pid 1994661:tid 1994661] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "science-on-stage.sk"] [uri "/index.php"] [unique_id "aZlx0YhPsHRVAc81jVCPKAAAAAY"] [Sat Feb 21 13:50:26.160543 2026] [security2:error] [pid 1994661:tid 1994661] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "science-on-stage.sk"] [uri "/index.php"] [unique_id "aZlx0YhPsHRVAc81jVCPKAAAAAY"] [Sat Feb 21 13:50:32.860207 2026] [autoindex:error] [pid 1985129:tid 1985129] [client 40.80.90.214:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 13:50:49.819139 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlx6TcQ3FFpkVv1wBBmXAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:50:49.819215 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlx6TcQ3FFpkVv1wBBmXAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:50:52.215992 2026] [security2:error] [pid 1988869:tid 1988869] [client 104.28.225.14:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-global": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZlx6gucuRjmpRitlBtQLQAAAAA"] [Sat Feb 21 13:50:52.216109 2026] [security2:error] [pid 1988869:tid 1988869] [client 104.28.225.14:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-ip": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZlx6gucuRjmpRitlBtQLQAAAAA"] [Sat Feb 21 13:51:06.484957 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlx-ohPsHRVAc81jVCPPgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:51:06.485040 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlx-ohPsHRVAc81jVCPPgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 13:51:09.912731 2026] [access_compat:error] [pid 1960664:tid 1960664] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:51:21.070245 2026] [authz_core:error] [pid 2012840:tid 2012840] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/technicaltesting/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 13:51:28.637752 2026] [authz_core:error] [pid 2002659:tid 2002659] [client 52.172.248.2:0] AH01630: client denied by server configuration: /home/scienceonstage/public_html/wp-content/uploads/wpcf7_uploads/ [Sat Feb 21 13:51:28.641235 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/scienceonstage/public_html/wp-content/uploads/wpcf7_captcha/ [Sat Feb 21 13:51:33.404067 2026] [security2:error] [pid 2009550:tid 2009550] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "science-on-stage.sk"] [uri "/wp-admin/network/index.php"] [unique_id "aZlyFJmrwNtK8g_1R7xPwQAAAAE"] [Sat Feb 21 13:51:33.404128 2026] [security2:error] [pid 2009550:tid 2009550] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "science-on-stage.sk"] [uri "/wp-admin/network/index.php"] [unique_id "aZlyFJmrwNtK8g_1R7xPwQAAAAE"] [Sat Feb 21 13:51:33.473724 2026] [security2:error] [pid 2012840:tid 2012840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyFb46EmVkKmvJBMfPrwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:51:33.473799 2026] [security2:error] [pid 2012840:tid 2012840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyFb46EmVkKmvJBMfPrwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:51:54.622817 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyKi_6Hqts6s-LNdAlywAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 13:51:54.622910 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyKi_6Hqts6s-LNdAlywAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 13:52:05.951985 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:52:13.679399 2026] [access_compat:error] [pid 2021002:tid 2021002] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:52:20.941567 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyRDcQ3FFpkVv1wBBmkAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:52:20.941653 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyRDcQ3FFpkVv1wBBmkAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 13:52:22.525907 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyRpmrwNtK8g_1R7xP3AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:52:22.525985 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyRpmrwNtK8g_1R7xP3AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:52:55.290669 2026] [security2:error] [pid 2021002:tid 2021002] [client 114.119.132.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/wp-includes/customize/class-wp-customize-custom-css-setting.php"] [unique_id "aZlyZ2loRRvwfYeoY8LswwAAAAM"], referer: https://arcticairandrefrigeration.com/wp-includes/customize/?C=D%3BO%3DA [Sat Feb 21 13:52:55.290762 2026] [security2:error] [pid 2021002:tid 2021002] [client 114.119.132.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/wp-includes/customize/class-wp-customize-custom-css-setting.php"] [unique_id "aZlyZ2loRRvwfYeoY8LswwAAAAM"], referer: https://arcticairandrefrigeration.com/wp-includes/customize/?C=D%3BO%3DA [Sat Feb 21 13:52:57.713971 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyadLbd4zJn3wkh3d9zgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:52:57.714069 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyadLbd4zJn3wkh3d9zgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 13:53:03.868804 2026] [security2:error] [pid 1960664:tid 1960664] [client 40.77.167.149:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlyb9Lbd4zJn3wkh3d90QAAAAc"] [Sat Feb 21 13:53:03.868863 2026] [security2:error] [pid 1960664:tid 1960664] [client 40.77.167.149:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZlyb9Lbd4zJn3wkh3d90QAAAAc"] [Sat Feb 21 13:53:16.885867 2026] [access_compat:error] [pid 1985129:tid 1985129] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:53:37.989699 2026] [autoindex:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01276: Cannot serve directory /home/edmtech/public_html/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sat Feb 21 13:53:58.018646 2026] [security2:error] [pid 2009550:tid 2009550] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.pk"] [uri "/cgi-sys/ea-php74/wp-includes/https-migration.php"] [unique_id "aZlypZmrwNtK8g_1R7xQEQAAAAE"], referer: binance.com [Sat Feb 21 13:53:58.018710 2026] [security2:error] [pid 2009550:tid 2009550] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.pk"] [uri "/cgi-sys/ea-php74/wp-includes/https-migration.php"] [unique_id "aZlypZmrwNtK8g_1R7xQEQAAAAE"], referer: binance.com [Sat Feb 21 13:54:07.201492 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyr5mrwNtK8g_1R7xQFgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:54:07.201559 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyr5mrwNtK8g_1R7xQFgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 13:54:13.517533 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlytdLbd4zJn3wkh3d9-AAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 13:54:13.517623 2026] [security2:error] [pid 1960664:tid 1960664] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlytdLbd4zJn3wkh3d9-AAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 13:54:15.517539 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyt4hPsHRVAc81jVCPowAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:54:15.517620 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyt4hPsHRVAc81jVCPowAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 13:54:21.099714 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:54:23.327145 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyv4hPsHRVAc81jVCPqQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:54:23.327215 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlyv4hPsHRVAc81jVCPqQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 13:54:28.452747 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:54:54.333738 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/technicaltesting/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 13:54:59.924999 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZly41QdZ64h20JcCSo2ywAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:54:59.925099 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZly41QdZ64h20JcCSo2ywAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 13:55:00.207421 2026] [authz_core:error] [pid 2002659:tid 2002659] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/technicaltesting/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 13:55:08.559738 2026] [security2:error] [pid 1988869:tid 1988869] [client 62.60.130.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZly6wucuRjmpRitlBtQvQAAAAA"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 13:55:08.559811 2026] [security2:error] [pid 1988869:tid 1988869] [client 62.60.130.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZly6wucuRjmpRitlBtQvQAAAAA"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 13:55:21.167808 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:55:47.215281 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:55:56.210752 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 13:55:57.599897 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/technicaltesting/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 13:56:02.477932 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzIq8gu0emly5i5ypdYAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 13:56:02.478002 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzIq8gu0emly5i5ypdYAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 13:56:03.995671 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/technicaltesting/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 13:56:12.879654 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzLMi1MYhmExHPVdt_WAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6 [Sat Feb 21 13:56:12.879765 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzLMi1MYhmExHPVdt_WAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6 [Sat Feb 21 13:56:22.147777 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.147876 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.412907 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.412957 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.671623 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.671683 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.929679 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:22.929758 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.187585 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.187639 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.464851 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.464947 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.724842 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.724940 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.984002 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:23.984056 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:24.258748 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:24.258825 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:24.533736 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:24.533799 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:25.635486 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:25.635536 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:25.896064 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:25.896161 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.158345 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.158422 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.417857 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.417944 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.708489 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.708536 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.966336 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:26.966395 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:27.223856 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:27.223898 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:27.480805 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:27.480857 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:27.749140 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:27.749246 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:28.015823 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:28.015873 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:28.274758 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:28.274830 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:28.532931 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:28.532987 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:29.201483 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:29.201537 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:29.473579 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:29.473624 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:29.746707 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:29.746782 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.014098 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.014158 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.307027 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.307082 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.566364 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.566450 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.916075 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:30.916188 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:31.180387 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:31.180458 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:31.442515 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:31.442576 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:31.863686 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:31.863759 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.122403 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.122526 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.380575 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.380646 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.639653 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.639717 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.897748 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:32.897796 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.171355 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.171434 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.430189 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.430245 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.688924 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.688987 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.951574 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:33.951710 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:34.227510 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:34.227582 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:34.487018 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:34.487079 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:34.766246 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:34.766303 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.024193 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.024259 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.292034 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.292108 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.337590 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzQ8i1MYhmExHPVdt_awAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:56:35.337676 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzQ8i1MYhmExHPVdt_awAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 13:56:35.549322 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.549399 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.819629 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:35.819686 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.092797 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.092854 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.373188 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.373258 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.630766 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.630864 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.898634 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:36.898669 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:37.156459 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:37.156517 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:37.414162 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:37.414218 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:38.334682 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:38.334735 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:38.612455 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:38.612500 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:38.872138 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:38.872197 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.139509 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.139584 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.406466 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.406513 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.664963 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.665050 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.922804 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:39.922858 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.179551 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.179596 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.437162 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.437248 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.694478 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.694539 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.964178 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:40.964271 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:41.318478 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:41.318559 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:41.585925 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:41.585977 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:41.856793 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:41.856864 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:42.175443 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:42.175485 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:42.532988 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:42.533064 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.003016 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.003064 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.271480 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.271549 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.591696 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.591767 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.850164 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:43.850239 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.113336 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.113400 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.374300 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.374377 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.640847 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.640904 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.899010 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:44.899073 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.199226 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.199264 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.456736 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.456809 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.714571 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.714608 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.972547 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:45.972604 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:46.241972 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:46.242035 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:46.512690 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:46.512741 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:46.770342 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:46.770391 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.037283 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.037333 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.293947 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.293991 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.553414 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.553531 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.826298 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:47.826363 2026] [core:error] [pid 2012011:tid 2012011] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.085002 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.085068 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.343081 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.343166 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.601951 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.602036 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.868701 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:48.868788 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.145910 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.145986 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.405056 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.405148 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.675364 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.675421 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.932805 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:49.932881 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:50.190467 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:50.190521 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:50.473759 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:50.473859 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:50.817899 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:50.817991 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.024167 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:56:51.090080 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.090139 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.347769 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.347837 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.605983 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.606066 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.864513 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:51.864595 2026] [core:error] [pid 2002659:tid 2002659] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:52.122440 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:52.122502 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:52.641643 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:52.641693 2026] [core:error] [pid 1949603:tid 1949603] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:52.900209 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:52.900278 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.159368 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.159461 2026] [core:error] [pid 1988869:tid 1988869] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.417963 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.418015 2026] [core:error] [pid 2012077:tid 2012077] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.678205 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.678270 2026] [core:error] [pid 1994661:tid 1994661] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.935508 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:53.935547 2026] [core:error] [pid 2022049:tid 2022049] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:54.213833 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:54.213881 2026] [core:error] [pid 2022635:tid 2022635] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:54.784610 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:54.784686 2026] [core:error] [pid 2009550:tid 2009550] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:55.055649 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:55.055719 2026] [core:error] [pid 2021783:tid 2021783] [client 20.5.72.178:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 13:56:55.918817 2026] [security2:error] [pid 2012011:tid 2012011] [client 62.60.130.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlzVy_6Hqts6s-LNdAmdAAAAAk"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 13:56:55.918882 2026] [security2:error] [pid 2012011:tid 2012011] [client 62.60.130.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-login.php"] [unique_id "aZlzVy_6Hqts6s-LNdAmdAAAAAk"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 13:57:03.028365 2026] [security2:error] [pid 1994661:tid 1994661] [client 62.60.130.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZlzXohPsHRVAc81jVCQEwAAAAY"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 13:57:03.028448 2026] [security2:error] [pid 1994661:tid 1994661] [client 62.60.130.210:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/index.php"] [unique_id "aZlzXohPsHRVAc81jVCQEwAAAAY"], referer: https://5starapptex.com/wp-login.php [Sat Feb 21 13:57:15.910315 2026] [security2:error] [pid 1949603:tid 1949603] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-global": Permission denied [hostname "des-pvt.com"] [uri "/wp-admin/css/"] [unique_id "aZlza-nNlyfrsrZbi4_1GwAAAAQ"], referer: binance.com [Sat Feb 21 13:57:15.910364 2026] [security2:error] [pid 1949603:tid 1949603] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-ip": Permission denied [hostname "des-pvt.com"] [uri "/wp-admin/css/"] [unique_id "aZlza-nNlyfrsrZbi4_1GwAAAAQ"], referer: binance.com [Sat Feb 21 13:57:24.173343 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com [Sat Feb 21 13:57:24.181234 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 13:57:31.636385 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzezcQ3FFpkVv1wBBnUgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fsubsystem%2Floop3%2Fqueue [Sat Feb 21 13:57:31.636471 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzezcQ3FFpkVv1wBBnUgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fsubsystem%2Floop3%2Fqueue [Sat Feb 21 13:57:35.530255 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 13:57:42.385330 2026] [authz_core:error] [pid 2021783:tid 2021783] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-admin/maint/error_log, referer: binance.com [Sat Feb 21 13:58:34.296612 2026] [security2:error] [pid 2002659:tid 2002659] [client 20.187.67.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/gtc.php"] [unique_id "aZlzujcQ3FFpkVv1wBBndgAAAAo"] [Sat Feb 21 13:58:34.296702 2026] [security2:error] [pid 2002659:tid 2002659] [client 20.187.67.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/gtc.php"] [unique_id "aZlzujcQ3FFpkVv1wBBndgAAAAo"] [Sat Feb 21 13:58:38.800199 2026] [security2:error] [pid 1988869:tid 1988869] [client 20.187.67.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlzvQucuRjmpRitlBtRSgAAAAA"] [Sat Feb 21 13:58:38.800303 2026] [security2:error] [pid 1988869:tid 1988869] [client 20.187.67.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZlzvQucuRjmpRitlBtRSgAAAAA"] [Sat Feb 21 13:58:42.195562 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzwlQdZ64h20JcCSo3YgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 13:58:42.195713 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzwlQdZ64h20JcCSo3YgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 13:58:42.537460 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:58:47.005185 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzxqQ5aTok73OU13HC0wAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Floop7%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem [Sat Feb 21 13:58:47.005388 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlzxqQ5aTok73OU13HC0wAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Floop7%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem [Sat Feb 21 13:59:01.397339 2026] [security2:error] [pid 2021783:tid 2021783] [client 185.93.89.136:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "thewoodshed.pk"] [uri "/.env"] [unique_id "aZlz1a8gu0emly5i5ypd2QAAAAU"] [Sat Feb 21 13:59:21.010501 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlz6Mi1MYhmExHPVdt_2QAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 13:59:21.010605 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZlz6Mi1MYhmExHPVdt_2QAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 13:59:47.528017 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 13:59:54.252828 2026] [security2:error] [pid 2012077:tid 2012077] [client 104.207.51.140:0] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "www.serversvalley.com"] [uri "/contact.html"] [unique_id "aZl0ClQdZ64h20JcCSo3gwAAAAs"], referer: https://www.serversvalley.com/contact.html [Sat Feb 21 13:59:54.252974 2026] [security2:error] [pid 2012077:tid 2012077] [client 104.207.51.140:0] ModSecurity: Warning. Found 1 byte(s) in ARGS:token outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "www.serversvalley.com"] [uri "/contact.html"] [unique_id "aZl0ClQdZ64h20JcCSo3gwAAAAs"], referer: https://www.serversvalley.com/contact.html [Sat Feb 21 13:59:54.253088 2026] [security2:error] [pid 1994661:tid 1994661] [client 104.207.51.140:0] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "www.serversvalley.com"] [uri "/contact.html"] [unique_id "aZl0CohPsHRVAc81jVCQdAAAAAY"], referer: https://www.serversvalley.com/contact.html [Sat Feb 21 13:59:54.253205 2026] [security2:error] [pid 1994661:tid 1994661] [client 104.207.51.140:0] ModSecurity: Warning. Found 1 byte(s) in ARGS:token outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "www.serversvalley.com"] [uri "/contact.html"] [unique_id "aZl0CohPsHRVAc81jVCQdAAAAAY"], referer: https://www.serversvalley.com/contact.html [Sat Feb 21 14:00:06.807983 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 14:00:19.259716 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0I68gu0emly5i5ypeAQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 14:00:19.259844 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0I68gu0emly5i5ypeAQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 14:00:32.590666 2026] [core:error] [pid 2022049:tid 2022049] [client 84.247.188.147:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: binance.com [Sat Feb 21 14:00:32.590732 2026] [core:error] [pid 2022049:tid 2022049] [client 84.247.188.147:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: binance.com [Sat Feb 21 14:00:40.679810 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0OC_6Hqts6s-LNdAm9AAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:00:40.679905 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0OC_6Hqts6s-LNdAm9AAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:01:12.733880 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0WKQ5aTok73OU13HDGgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 14:01:12.733959 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0WKQ5aTok73OU13HDGgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 14:01:21.337003 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:01:26.315806 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0ZqQ5aTok73OU13HDIAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:01:26.315883 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0ZqQ5aTok73OU13HDIAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:01:52.377661 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0gIhPsHRVAc81jVCQqAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:01:52.377794 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0gIhPsHRVAc81jVCQqAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:02:23.064957 2026] [security2:error] [pid 2022049:tid 2022049] [client 77.75.79.17:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-global": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl0m8i1MYhmExHPVduAIwAAAAc"] [Sat Feb 21 14:02:23.065034 2026] [security2:error] [pid 2022049:tid 2022049] [client 77.75.79.17:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-ip": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl0m8i1MYhmExHPVduAIwAAAAc"] [Sat Feb 21 14:02:23.175969 2026] [proxy_fcgi:error] [pid 1988869:tid 1988869] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:23.373615 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:23.584250 2026] [proxy_fcgi:error] [pid 2012011:tid 2012011] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:23.760035 2026] [proxy_fcgi:error] [pid 2009550:tid 2009550] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:23.935100 2026] [proxy_fcgi:error] [pid 1949603:tid 1949603] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:24.135542 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:24.310072 2026] [proxy_fcgi:error] [pid 2002659:tid 2002659] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:24.483822 2026] [proxy_fcgi:error] [pid 1994661:tid 1994661] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:24.691363 2026] [proxy_fcgi:error] [pid 2009550:tid 2009550] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:24.867434 2026] [proxy_fcgi:error] [pid 1949603:tid 1949603] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:25.040012 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:25.276307 2026] [proxy_fcgi:error] [pid 2021783:tid 2021783] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:25.450901 2026] [proxy_fcgi:error] [pid 2012011:tid 2012011] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:25.622733 2026] [proxy_fcgi:error] [pid 2009550:tid 2009550] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:25.797356 2026] [proxy_fcgi:error] [pid 1949603:tid 1949603] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:26.758859 2026] [proxy_fcgi:error] [pid 2022635:tid 2022635] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:02:26.938102 2026] [cgi:error] [pid 1949603:tid 1949603] [client 20.207.195.210:0] AH02812: stderr from /home/pebitech/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 14:02:29.007926 2026] [proxy_fcgi:error] [pid 2012011:tid 2012011] [client 20.207.195.210:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:03:02.178252 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0xunNlyfrsrZbi4_1zAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:03:02.178376 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0xunNlyfrsrZbi4_1zAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:03:04.311545 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 14:03:04.311621 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 14:03:04.311694 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 14:03:04.311965 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 14:03:04.311968 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 14:03:04.312079 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 14:03:04.312556 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 14:03:04.312664 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 14:03:04.312817 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 107.174.26.51:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 14:03:30.294919 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl04i_6Hqts6s-LNdAnQQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 14:03:30.295092 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl04i_6Hqts6s-LNdAnQQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 14:03:30.504399 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:03:31.124206 2026] [security2:error] [pid 2021783:tid 2021783] [client 57.141.20.17:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZl0468gu0emly5i5ypeXQAAAAU"] [Sat Feb 21 14:03:31.124255 2026] [security2:error] [pid 2021783:tid 2021783] [client 57.141.20.17:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZl0468gu0emly5i5ypeXQAAAAU"] [Sat Feb 21 14:03:34.047569 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl05VQdZ64h20JcCSo38AAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:03:34.047655 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl05VQdZ64h20JcCSo38AAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:03:56.201250 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0_KQ5aTok73OU13HDaQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:03:56.201401 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl0_KQ5aTok73OU13HDaQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:04:01.417558 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 3.233.59.216:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 14:04:01.418000 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 3.233.59.216:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 14:04:01.418730 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 3.233.59.216:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 14:04:54.636283 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/hello.world"] [unique_id "aZl1NohPsHRVAc81jVCRAgAAAAY"] [Sat Feb 21 14:04:54.636580 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/hello.world"] [unique_id "aZl1NohPsHRVAc81jVCRAgAAAAY"] [Sat Feb 21 14:04:56.713272 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/"] [unique_id "aZl1ODcQ3FFpkVv1wBBoMAAAAAo"] [Sat Feb 21 14:04:56.713611 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/"] [unique_id "aZl1ODcQ3FFpkVv1wBBoMAAAAAo"] [Sat Feb 21 14:04:58.137971 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1OunNlyfrsrZbi4_1_wAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:04:58.138144 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1OunNlyfrsrZbi4_1_wAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:04:59.034376 2026] [security2:error] [pid 2012011:tid 2012011] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1Oy_6Hqts6s-LNdAnbQAAAAk"] [Sat Feb 21 14:04:59.994057 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:05:01.023644 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl1PYhPsHRVAc81jVCRBQAAAAY"] [Sat Feb 21 14:05:03.340793 2026] [security2:error] [pid 1949603:tid 1949603] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1P-nNlyfrsrZbi4_2AQAAAAQ"] [Sat Feb 21 14:05:05.729786 2026] [security2:error] [pid 2012011:tid 2012011] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl1QS_6Hqts6s-LNdAncAAAAAk"] [Sat Feb 21 14:05:06.093551 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1QQucuRjmpRitlBtSCwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:05:06.093641 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1QQucuRjmpRitlBtSCwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:05:07.855062 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aZl1QzcQ3FFpkVv1wBBoNQAAAAo"] [Sat Feb 21 14:05:09.727776 2026] [security2:error] [pid 2022049:tid 2022049] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1Rci1MYhmExHPVduAdgAAAAc"] [Sat Feb 21 14:05:11.740374 2026] [security2:error] [pid 2021783:tid 2021783] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1R68gu0emly5i5ypejQAAAAU"] [Sat Feb 21 14:05:13.649928 2026] [security2:error] [pid 2012077:tid 2012077] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl1SVQdZ64h20JcCSo4IQAAAAs"] [Sat Feb 21 14:05:15.825232 2026] [security2:error] [pid 2022049:tid 2022049] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1S8i1MYhmExHPVduAeQAAAAc"] [Sat Feb 21 14:05:17.535486 2026] [authz_core:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 14:05:17.960223 2026] [security2:error] [pid 2009550:tid 2009550] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl1TZmrwNtK8g_1R7xRjQAAAAE"] [Sat Feb 21 14:05:20.421351 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1UDcQ3FFpkVv1wBBoOwAAAAo"] [Sat Feb 21 14:05:22.516006 2026] [authz_core:error] [pid 2009550:tid 2009550] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 14:05:22.959783 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl1UjcQ3FFpkVv1wBBoPAAAAAo"] [Sat Feb 21 14:05:25.349200 2026] [security2:error] [pid 1988869:tid 1988869] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1VQucuRjmpRitlBtSFgAAAAA"] [Sat Feb 21 14:05:27.409167 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl1VzcQ3FFpkVv1wBBoPgAAAAo"] [Sat Feb 21 14:05:28.930954 2026] [security2:error] [pid 2009550:tid 2009550] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aZl1WJmrwNtK8g_1R7xRkwAAAAE"], referer: binance.com [Sat Feb 21 14:05:28.931028 2026] [security2:error] [pid 2009550:tid 2009550] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aZl1WJmrwNtK8g_1R7xRkwAAAAE"], referer: binance.com [Sat Feb 21 14:05:29.212998 2026] [authz_core:error] [pid 2022635:tid 2022635] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 14:05:29.666584 2026] [security2:error] [pid 1988869:tid 1988869] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1WQucuRjmpRitlBtSGAAAAAA"] [Sat Feb 21 14:05:31.579539 2026] [security2:error] [pid 2012077:tid 2012077] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1W1QdZ64h20JcCSo4KwAAAAs"] [Sat Feb 21 14:05:33.702088 2026] [security2:error] [pid 1988869:tid 1988869] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1XQucuRjmpRitlBtSGgAAAAA"] [Sat Feb 21 14:05:35.826873 2026] [security2:error] [pid 2022635:tid 2022635] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1X6Q5aTok73OU13HDmgAAAAI"] [Sat Feb 21 14:05:37.990777 2026] [security2:error] [pid 1988869:tid 1988869] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1YQucuRjmpRitlBtSHAAAAAA"] [Sat Feb 21 14:05:39.543789 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/pomo/error_log, referer: binance.com [Sat Feb 21 14:05:39.967634 2026] [security2:error] [pid 2012011:tid 2012011] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1Yy_6Hqts6s-LNdAnfgAAAAk"] [Sat Feb 21 14:05:42.141971 2026] [security2:error] [pid 1988869:tid 1988869] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1ZgucuRjmpRitlBtSHgAAAAA"] [Sat Feb 21 14:05:44.080535 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1aDcQ3FFpkVv1wBBoSAAAAAo"] [Sat Feb 21 14:05:46.123202 2026] [security2:error] [pid 2022635:tid 2022635] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1aqQ5aTok73OU13HDoAAAAAI"] [Sat Feb 21 14:05:48.294663 2026] [security2:error] [pid 2009550:tid 2009550] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1bJmrwNtK8g_1R7xRnAAAAAE"] [Sat Feb 21 14:05:50.610054 2026] [security2:error] [pid 2009550:tid 2009550] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1bpmrwNtK8g_1R7xRnQAAAAE"] [Sat Feb 21 14:05:51.754404 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/alliancechem/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 14:05:52.746249 2026] [security2:error] [pid 2012011:tid 2012011] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1cC_6Hqts6s-LNdAnhgAAAAk"] [Sat Feb 21 14:05:54.846560 2026] [security2:error] [pid 2009550:tid 2009550] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1cpmrwNtK8g_1R7xRnwAAAAE"] [Sat Feb 21 14:05:57.147193 2026] [security2:error] [pid 2022049:tid 2022049] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1dci1MYhmExHPVduAjQAAAAc"] [Sat Feb 21 14:05:59.350803 2026] [security2:error] [pid 2012011:tid 2012011] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1dy_6Hqts6s-LNdAniQAAAAk"] [Sat Feb 21 14:06:00.952971 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1eAucuRjmpRitlBtSKQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:06:00.953060 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1eAucuRjmpRitlBtSKQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:06:01.378546 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1eTcQ3FFpkVv1wBBoUgAAAAo"] [Sat Feb 21 14:06:03.400995 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:06:03.496519 2026] [security2:error] [pid 2022049:tid 2022049] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1e8i1MYhmExHPVduAkAAAAAc"] [Sat Feb 21 14:06:05.664018 2026] [security2:error] [pid 2022635:tid 2022635] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1faQ5aTok73OU13HDqgAAAAI"] [Sat Feb 21 14:06:07.986429 2026] [security2:error] [pid 2012011:tid 2012011] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1fy_6Hqts6s-LNdAnjQAAAAk"] [Sat Feb 21 14:06:09.852518 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1gTcQ3FFpkVv1wBBoVgAAAAo"] [Sat Feb 21 14:06:12.031153 2026] [security2:error] [pid 2012077:tid 2012077] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1hFQdZ64h20JcCSo4PwAAAAs"] [Sat Feb 21 14:06:14.122449 2026] [security2:error] [pid 2022049:tid 2022049] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1hsi1MYhmExHPVduAlQAAAAc"] [Sat Feb 21 14:06:14.990987 2026] [security2:error] [pid 2012077:tid 2012077] [client 40.77.167.136:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZl1hlQdZ64h20JcCSo4QAAAAAs"] [Sat Feb 21 14:06:16.426497 2026] [security2:error] [pid 2021783:tid 2021783] [client 165.154.227.13:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl1iK8gu0emly5i5ypesAAAAAU"] [Sat Feb 21 14:06:16.968559 2026] [security2:error] [pid 1988869:tid 1988869] [client 52.167.144.16:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZl1iAucuRjmpRitlBtSMQAAAAA"] [Sat Feb 21 14:06:18.561870 2026] [security2:error] [pid 2002659:tid 2002659] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1ijcQ3FFpkVv1wBBoWgAAAAo"] [Sat Feb 21 14:06:20.682618 2026] [security2:error] [pid 2021783:tid 2021783] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/public/index.php"] [unique_id "aZl1jK8gu0emly5i5ypesgAAAAU"] [Sat Feb 21 14:06:22.624294 2026] [security2:error] [pid 2022049:tid 2022049] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/public/index.php"] [unique_id "aZl1jsi1MYhmExHPVduAmAAAAAc"] [Sat Feb 21 14:06:22.778261 2026] [security2:error] [pid 2009550:tid 2009550] [client 52.167.144.211:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZl1jpmrwNtK8g_1R7xRrQAAAAE"] [Sat Feb 21 14:06:24.299257 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1kIhPsHRVAc81jVCRMAAAAAY"] [Sat Feb 21 14:06:24.299363 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1kIhPsHRVAc81jVCRMAAAAAY"] [Sat Feb 21 14:06:24.299418 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create /&/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1kIhPsHRVAc81jVCRMAAAAAY"] [Sat Feb 21 14:06:24.299504 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create/&/<?echo(md5(hi)) ?>/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1kIhPsHRVAc81jVCRMAAAAAY"] [Sat Feb 21 14:06:24.299806 2026] [security2:error] [pid 1994661:tid 1994661] [client 165.154.227.13:0] ModSecurity: Warning. Pattern match "(?:<\\\\?(?!xml\\\\s)|<\\\\?php|\\\\[(?:/|\\\\\\\\)?php\\\\])" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "41"] [id "933100"] [msg "PHP Injection Attack: PHP Open Tag Found"] [data "Matched Data: <? found within ARGS_NAMES:/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php: /<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1kIhPsHRVAc81jVCRMAAAAAY"] [Sat Feb 21 14:06:26.398143 2026] [security2:error] [pid 2012077:tid 2012077] [client 165.154.227.13:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1klQdZ64h20JcCSo4RgAAAAs"] [Sat Feb 21 14:06:26.398298 2026] [security2:error] [pid 2012077:tid 2012077] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1klQdZ64h20JcCSo4RgAAAAs"] [Sat Feb 21 14:06:26.398388 2026] [security2:error] [pid 2012077:tid 2012077] [client 165.154.227.13:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZl1klQdZ64h20JcCSo4RgAAAAs"] [Sat Feb 21 14:06:39.163620 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1n-nNlyfrsrZbi4_2LAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 14:06:39.163715 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1n-nNlyfrsrZbi4_2LAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 14:06:57.192228 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1sS_6Hqts6s-LNdAnogAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 14:06:57.192346 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1sS_6Hqts6s-LNdAnogAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 14:07:25.203882 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1zTcQ3FFpkVv1wBBodwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:07:25.204023 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl1zTcQ3FFpkVv1wBBodwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:07:37.717797 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:07:48.763728 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 14:07:55.572883 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 14:08:16.173365 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2AFQdZ64h20JcCSo4dQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:08:16.173457 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2AFQdZ64h20JcCSo4dQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:08:18.160213 2026] [security2:error] [pid 2022049:tid 2022049] [client 217.217.251.46:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/hello.world"] [unique_id "aZl2Asi1MYhmExHPVduAzAAAAAc"] [Sat Feb 21 14:08:18.160343 2026] [security2:error] [pid 2022049:tid 2022049] [client 217.217.251.46:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/hello.world"] [unique_id "aZl2Asi1MYhmExHPVduAzAAAAAc"] [Sat Feb 21 14:08:19.428628 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2A1QdZ64h20JcCSo4dwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F4 [Sat Feb 21 14:08:19.428713 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2A1QdZ64h20JcCSo4dwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F4 [Sat Feb 21 14:08:19.777638 2026] [security2:error] [pid 2002659:tid 2002659] [client 217.217.251.46:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/"] [unique_id "aZl2AzcQ3FFpkVv1wBBokQAAAAo"] [Sat Feb 21 14:08:19.777821 2026] [security2:error] [pid 2002659:tid 2002659] [client 217.217.251.46:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/"] [unique_id "aZl2AzcQ3FFpkVv1wBBokQAAAAo"] [Sat Feb 21 14:08:21.530832 2026] [security2:error] [pid 1988869:tid 1988869] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2BQucuRjmpRitlBtSaQAAAAA"] [Sat Feb 21 14:08:22.972107 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl2BqQ5aTok73OU13HD5AAAAAI"] [Sat Feb 21 14:08:24.336214 2026] [security2:error] [pid 2022049:tid 2022049] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2CMi1MYhmExHPVduAzwAAAAc"] [Sat Feb 21 14:08:25.785855 2026] [security2:error] [pid 2009550:tid 2009550] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl2CZmrwNtK8g_1R7xR5AAAAAE"] [Sat Feb 21 14:08:27.059027 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 52.167.144.236:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 14:08:27.059312 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 52.167.144.236:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 14:08:27.059716 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 52.167.144.236:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 14:08:27.215017 2026] [security2:error] [pid 1988869:tid 1988869] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aZl2CwucuRjmpRitlBtSbAAAAAA"] [Sat Feb 21 14:08:28.662136 2026] [security2:error] [pid 2022049:tid 2022049] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2DMi1MYhmExHPVduA0QAAAAc"] [Sat Feb 21 14:08:30.207202 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2DqQ5aTok73OU13HD6AAAAAI"] [Sat Feb 21 14:08:30.540771 2026] [security2:error] [pid 2012011:tid 2012011] [client 200.123.201.28:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/thewoodshed-global": Permission denied [hostname "thewoodshed.pk"] [uri "/home-10/"] [unique_id "aZl2Di_6Hqts6s-LNdAnzwAAAAk"], referer: https://thewoodshed.pk/ [Sat Feb 21 14:08:30.540824 2026] [security2:error] [pid 2012011:tid 2012011] [client 200.123.201.28:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/thewoodshed-ip": Permission denied [hostname "thewoodshed.pk"] [uri "/home-10/"] [unique_id "aZl2Di_6Hqts6s-LNdAnzwAAAAk"], referer: https://thewoodshed.pk/ [Sat Feb 21 14:08:31.449076 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 207.46.13.125:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 14:08:31.449545 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 207.46.13.125:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 14:08:31.450245 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 207.46.13.125:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 14:08:31.801101 2026] [security2:error] [pid 1988869:tid 1988869] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl2DwucuRjmpRitlBtSbwAAAAA"] [Sat Feb 21 14:08:32.410169 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2EMi1MYhmExHPVduA0wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:08:32.410265 2026] [security2:error] [pid 2022049:tid 2022049] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2EMi1MYhmExHPVduA0wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:08:33.435817 2026] [security2:error] [pid 2012077:tid 2012077] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2EVQdZ64h20JcCSo4gAAAAAs"] [Sat Feb 21 14:08:35.058876 2026] [security2:error] [pid 2009550:tid 2009550] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl2E5mrwNtK8g_1R7xR6QAAAAE"] [Sat Feb 21 14:08:36.550634 2026] [security2:error] [pid 1994661:tid 1994661] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2FIhPsHRVAc81jVCRbgAAAAY"] [Sat Feb 21 14:08:37.968017 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl2FaQ5aTok73OU13HD7AAAAAI"] [Sat Feb 21 14:08:39.371674 2026] [security2:error] [pid 1994661:tid 1994661] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2F4hPsHRVAc81jVCRbwAAAAY"] [Sat Feb 21 14:08:40.881087 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZl2GKQ5aTok73OU13HD7QAAAAI"] [Sat Feb 21 14:08:42.491058 2026] [security2:error] [pid 2021783:tid 2021783] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2Gq8gu0emly5i5ype9QAAAAU"] [Sat Feb 21 14:08:43.908599 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2G6Q5aTok73OU13HD7gAAAAI"] [Sat Feb 21 14:08:45.308387 2026] [security2:error] [pid 2021783:tid 2021783] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2Ha8gu0emly5i5ype9gAAAAU"] [Sat Feb 21 14:08:46.814803 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2HqQ5aTok73OU13HD7wAAAAI"] [Sat Feb 21 14:08:48.302006 2026] [security2:error] [pid 2021783:tid 2021783] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2IK8gu0emly5i5ype9wAAAAU"] [Sat Feb 21 14:08:49.113788 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:08:49.696491 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:08:49.780674 2026] [security2:error] [pid 2021783:tid 2021783] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2Ia8gu0emly5i5ype-AAAAAU"] [Sat Feb 21 14:08:51.301158 2026] [security2:error] [pid 2029018:tid 2029018] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2I-Ir-8fgvpvBQQ28igAAAAM"] [Sat Feb 21 14:08:52.801474 2026] [security2:error] [pid 2022049:tid 2022049] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2JMi1MYhmExHPVduA3wAAAAc"] [Sat Feb 21 14:08:54.228188 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2JunNlyfrsrZbi4_2agAAAAQ"] [Sat Feb 21 14:08:55.638965 2026] [security2:error] [pid 2009550:tid 2009550] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2J5mrwNtK8g_1R7xR9AAAAAE"] [Sat Feb 21 14:08:57.088110 2026] [security2:error] [pid 2012077:tid 2012077] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2KVQdZ64h20JcCSo4iwAAAAs"] [Sat Feb 21 14:08:58.090204 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:08:58.586252 2026] [security2:error] [pid 2012011:tid 2012011] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2Ki_6Hqts6s-LNdAn3QAAAAk"] [Sat Feb 21 14:09:00.213137 2026] [security2:error] [pid 2022635:tid 2022635] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2LKQ5aTok73OU13HD9gAAAAI"] [Sat Feb 21 14:09:01.863203 2026] [security2:error] [pid 2029018:tid 2029018] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2LeIr-8fgvpvBQQ28jwAAAAM"] [Sat Feb 21 14:09:03.851687 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2L-nNlyfrsrZbi4_2bgAAAAQ"] [Sat Feb 21 14:09:05.336656 2026] [security2:error] [pid 2012011:tid 2012011] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2MS_6Hqts6s-LNdAn4AAAAAk"] [Sat Feb 21 14:09:07.046712 2026] [security2:error] [pid 2029018:tid 2029018] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2M-Ir-8fgvpvBQQ28kQAAAAM"] [Sat Feb 21 14:09:08.607800 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2NOnNlyfrsrZbi4_2cAAAAAQ"] [Sat Feb 21 14:09:09.994499 2026] [security2:error] [pid 2012011:tid 2012011] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2NS_6Hqts6s-LNdAn4gAAAAk"] [Sat Feb 21 14:09:11.523543 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2N-nNlyfrsrZbi4_2cQAAAAQ"] [Sat Feb 21 14:09:13.089856 2026] [security2:error] [pid 1994661:tid 1994661] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2OYhPsHRVAc81jVCRgAAAAAY"] [Sat Feb 21 14:09:14.679162 2026] [security2:error] [pid 2012011:tid 2012011] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2Oi_6Hqts6s-LNdAn5AAAAAk"] [Sat Feb 21 14:09:16.122262 2026] [security2:error] [pid 2009550:tid 2009550] [client 217.217.251.46:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZl2PJmrwNtK8g_1R7xR_wAAAAE"] [Sat Feb 21 14:09:17.716353 2026] [security2:error] [pid 1949603:tid 1949603] [client 217.217.251.46:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/public/index.php"] [unique_id "aZl2PenNlyfrsrZbi4_2dAAAAAQ"] [Sat Feb 21 14:09:18.933159 2026] [security2:error] [pid 1988869:tid 1988869] [client 217.217.251.46:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/public/index.php"] [unique_id "aZl2PgucuRjmpRitlBtShwAAAAA"] [Sat Feb 21 14:09:38.380332 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.77.167.38:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/wp-content/uploads/2024/05/hero-1200-overview-3m-littmann.us-classic-iii.jpg"] [unique_id "aZl2UunNlyfrsrZbi4_2fgAAAAQ"] [Sat Feb 21 14:09:38.380436 2026] [security2:error] [pid 1949603:tid 1949603] [client 40.77.167.38:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/wp-content/uploads/2024/05/hero-1200-overview-3m-littmann.us-classic-iii.jpg"] [unique_id "aZl2UunNlyfrsrZbi4_2fgAAAAQ"] [Sat Feb 21 14:09:44.635252 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2WOnNlyfrsrZbi4_2gQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 14:09:44.635333 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2WOnNlyfrsrZbi4_2gQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 14:10:10.392560 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2cqQ5aTok73OU13HEFAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop0%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 14:10:10.392646 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2cqQ5aTok73OU13HEFAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop0%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 14:10:16.121842 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:10:46.902550 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2ljcQ3FFpkVv1wBBo1wAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk [Sat Feb 21 14:10:46.902644 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2ljcQ3FFpkVv1wBBo1wAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk [Sat Feb 21 14:11:19.080894 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:11:29.856021 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2wQucuRjmpRitlBtSvgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fsubsystem%2Floop5 [Sat Feb 21 14:11:29.856146 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl2wQucuRjmpRitlBtSvgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fsubsystem%2Floop5 [Sat Feb 21 14:11:56.437358 2026] [core:error] [pid 2012011:tid 2012011] [client 57.141.20.22:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:11:56.437478 2026] [core:error] [pid 2012011:tid 2012011] [client 57.141.20.22:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:12:32.899484 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:12:32.902662 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:13:14.420508 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3Ki_6Hqts6s-LNdAoSAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:13:14.420722 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3Ki_6Hqts6s-LNdAoSAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:13:15.434170 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3KzcQ3FFpkVv1wBBpGAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:13:15.434232 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3KzcQ3FFpkVv1wBBpGAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:13:15.444829 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3K6Q5aTok73OU13HEYgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2%2Fmq [Sat Feb 21 14:13:15.444911 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3K6Q5aTok73OU13HEYgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop5%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2%2Fmq [Sat Feb 21 14:13:19.203109 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3LzcQ3FFpkVv1wBBpGgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:13:19.203218 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3LzcQ3FFpkVv1wBBpGgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:13:40.044707 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:13:43.703492 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3R6Q5aTok73OU13HEbgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:13:43.703581 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3R6Q5aTok73OU13HEbgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:13:49.329307 2026] [security2:error] [pid 2029018:tid 2029018] [client 40.77.167.156:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZl3TOIr-8fgvpvBQQ29CgAAAAM"] [Sat Feb 21 14:13:49.329377 2026] [security2:error] [pid 2029018:tid 2029018] [client 40.77.167.156:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZl3TOIr-8fgvpvBQQ29CgAAAAM"] [Sat Feb 21 14:14:00.457542 2026] [security2:error] [pid 2009550:tid 2009550] [client 85.208.96.209:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZl3TZmrwNtK8g_1R7xScwAAAAE"] [Sat Feb 21 14:14:00.457593 2026] [security2:error] [pid 2009550:tid 2009550] [client 85.208.96.209:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZl3TZmrwNtK8g_1R7xScwAAAAE"] [Sat Feb 21 14:14:02.167786 2026] [security2:error] [pid 1988869:tid 1988869] [client 34.158.168.101:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZl3WgucuRjmpRitlBtS_gAAAAA"] [Sat Feb 21 14:14:02.188575 2026] [security2:error] [pid 1994661:tid 1994661] [client 34.158.168.101:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZl3WohPsHRVAc81jVCR-QAAAAY"] [Sat Feb 21 14:14:39.373084 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3f68gu0emly5i5ypfjQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem [Sat Feb 21 14:14:39.373188 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3f68gu0emly5i5ypfjQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem [Sat Feb 21 14:14:41.925189 2026] [security2:error] [pid 2022635:tid 2022635] [client 20.215.67.86:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-global": Permission denied [hostname "ahk.com.pk"] [uri "/index.php"] [unique_id "aZl3gaQ5aTok73OU13HEiwAAAAI"] [Sat Feb 21 14:14:41.925315 2026] [security2:error] [pid 2022635:tid 2022635] [client 20.215.67.86:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-ip": Permission denied [hostname "ahk.com.pk"] [uri "/index.php"] [unique_id "aZl3gaQ5aTok73OU13HEiwAAAAI"] [Sat Feb 21 14:14:47.275672 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:47.275727 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:47.434251 2026] [core:error] [pid 2022635:tid 2022635] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:47.434298 2026] [core:error] [pid 2022635:tid 2022635] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:47.935422 2026] [core:error] [pid 2012011:tid 2012011] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:47.935471 2026] [core:error] [pid 2012011:tid 2012011] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.092333 2026] [core:error] [pid 1994661:tid 1994661] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.092387 2026] [core:error] [pid 1994661:tid 1994661] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.249889 2026] [core:error] [pid 2012077:tid 2012077] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.249985 2026] [core:error] [pid 2012077:tid 2012077] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.406938 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.406998 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.566696 2026] [core:error] [pid 2022635:tid 2022635] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.566829 2026] [core:error] [pid 2022635:tid 2022635] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.723617 2026] [core:error] [pid 1988869:tid 1988869] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.723665 2026] [core:error] [pid 1988869:tid 1988869] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.879304 2026] [core:error] [pid 2012011:tid 2012011] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:48.879345 2026] [core:error] [pid 2012011:tid 2012011] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.035826 2026] [core:error] [pid 1994661:tid 1994661] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.035885 2026] [core:error] [pid 1994661:tid 1994661] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.193983 2026] [core:error] [pid 2012077:tid 2012077] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.194068 2026] [core:error] [pid 2012077:tid 2012077] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.350822 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.350872 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.507451 2026] [core:error] [pid 2022635:tid 2022635] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.507510 2026] [core:error] [pid 2022635:tid 2022635] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.664074 2026] [core:error] [pid 1988869:tid 1988869] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.664176 2026] [core:error] [pid 1988869:tid 1988869] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.822256 2026] [core:error] [pid 2012011:tid 2012011] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.822320 2026] [core:error] [pid 2012011:tid 2012011] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.982671 2026] [core:error] [pid 1994661:tid 1994661] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:49.982713 2026] [core:error] [pid 1994661:tid 1994661] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:50.139643 2026] [core:error] [pid 2012077:tid 2012077] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:50.139712 2026] [core:error] [pid 2012077:tid 2012077] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:50.295353 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:50.295400 2026] [core:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 14:14:50.295730 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZl3ijcQ3FFpkVv1wBBpRwAAAAo"] [Sat Feb 21 14:14:50.295754 2026] [security2:error] [pid 2002659:tid 2002659] [client 185.193.157.189:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZl3ijcQ3FFpkVv1wBBpRwAAAAo"] [Sat Feb 21 14:14:58.175467 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3kq8gu0emly5i5ypfmAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:14:58.175546 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3kq8gu0emly5i5ypfmAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:15:03.044329 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:15:13.110390 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3oVQdZ64h20JcCSo5NgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:15:13.110479 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3oVQdZ64h20JcCSo5NgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:15:13.590425 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3oQucuRjmpRitlBtTHwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:15:13.590539 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3oQucuRjmpRitlBtTHwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:15:45.503015 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3wQucuRjmpRitlBtTKwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:15:45.503111 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3wQucuRjmpRitlBtTKwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:15:50.682888 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3xq8gu0emly5i5ypfrwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 14:15:50.682967 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3xq8gu0emly5i5ypfrwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 14:15:59.701661 2026] [security2:error] [pid 1994661:tid 1994661] [client 51.75.151.149:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-content/plugins/cidaas-pro-master/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZl3z4hPsHRVAc81jVCSLgAAAAY"] [Sat Feb 21 14:16:45.925262 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3_ZmrwNtK8g_1R7xSvAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 14:16:45.925332 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl3_ZmrwNtK8g_1R7xSvAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 14:17:23.040733 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4Ii_6Hqts6s-LNdAouAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:17:23.040813 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4Ii_6Hqts6s-LNdAouAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:17:33.466731 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:17:39.386518 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4M5mrwNtK8g_1R7xS0gAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:17:39.386576 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4M5mrwNtK8g_1R7xS0gAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:17:44.673514 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4OFQdZ64h20JcCSo5dQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:17:44.673595 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4OFQdZ64h20JcCSo5dQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:17:47.299315 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 68.71.254.6:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 14:18:00.365903 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4SOIr-8fgvpvBQQ29eQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 14:18:00.366008 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4SOIr-8fgvpvBQQ29eQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 14:18:03.071092 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 68.1.210.163:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 14:18:21.222408 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 117.189.181.59:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 14:18:23.026297 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4XqQ5aTok73OU13HE7gAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fmq [Sat Feb 21 14:18:23.026367 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4XqQ5aTok73OU13HE7gAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fmq [Sat Feb 21 14:18:30.867098 2026] [security2:error] [pid 2009550:tid 2009550] [client 65.108.120.148:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZl4ZpmrwNtK8g_1R7xS6QAAAAE"] [Sat Feb 21 14:18:35.686344 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4a5mrwNtK8g_1R7xS6wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:18:35.686430 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4a5mrwNtK8g_1R7xS6wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:18:40.186078 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4cKQ5aTok73OU13HE9QAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:18:40.186174 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4cKQ5aTok73OU13HE9QAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:19:00.899240 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 72.56.59.62:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 14:19:02.376480 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:19:15.366449 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 182.47.77.182:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 14:19:24.359827 2026] [security2:error] [pid 2012011:tid 2012011] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env"] [unique_id "aZl4nC_6Hqts6s-LNdAo6QAAAAk"] [Sat Feb 21 14:19:26.066159 2026] [security2:error] [pid 1949603:tid 1949603] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.prod"] [unique_id "aZl4nunNlyfrsrZbi4_3egAAAAQ"] [Sat Feb 21 14:19:26.074271 2026] [security2:error] [pid 2022635:tid 2022635] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.bak"] [unique_id "aZl4nqQ5aTok73OU13HFCwAAAAI"] [Sat Feb 21 14:19:26.159484 2026] [security2:error] [pid 2012011:tid 2012011] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.live"] [unique_id "aZl4ni_6Hqts6s-LNdAo6gAAAAk"] [Sat Feb 21 14:19:26.206626 2026] [security2:error] [pid 2009550:tid 2009550] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.production"] [unique_id "aZl4npmrwNtK8g_1R7xTAAAAAAE"] [Sat Feb 21 14:19:26.274925 2026] [security2:error] [pid 2029018:tid 2029018] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/awstats/.env"] [unique_id "aZl4nuIr-8fgvpvBQQ29nwAAAAM"] [Sat Feb 21 14:19:28.081455 2026] [security2:error] [pid 2009550:tid 2009550] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/crm/.env"] [unique_id "aZl4oJmrwNtK8g_1R7xTAQAAAAE"] [Sat Feb 21 14:19:28.180994 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 72.195.34.58:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 14:19:31.198877 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4owucuRjmpRitlBtTjAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 14:19:31.198944 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4owucuRjmpRitlBtTjAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 14:19:32.798353 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4pAucuRjmpRitlBtTjQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:19:32.798433 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4pAucuRjmpRitlBtTjQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:19:57.490311 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 14:19:58.864176 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4vq8gu0emly5i5ypgHAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5 [Sat Feb 21 14:19:58.864289 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4vq8gu0emly5i5ypgHAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5 [Sat Feb 21 14:20:00.098427 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 14:20:06.569715 2026] [access_compat:error] [pid 2002659:tid 2002659] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 14:20:08.261673 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:20:11.320380 2026] [security2:error] [pid 2002659:tid 2002659] [client 57.141.20.29:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZl4yzcQ3FFpkVv1wBBp0QAAAAo"] [Sat Feb 21 14:20:11.320510 2026] [security2:error] [pid 2002659:tid 2002659] [client 57.141.20.29:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZl4yzcQ3FFpkVv1wBBp0QAAAAo"] [Sat Feb 21 14:20:11.866552 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 14:20:13.136356 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4zaQ5aTok73OU13HFIgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 14:20:13.136434 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4zaQ5aTok73OU13HFIgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 14:20:23.534181 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 14:20:24.477308 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl42DcQ3FFpkVv1wBBp1wAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 14:20:24.477408 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl42DcQ3FFpkVv1wBBp1wAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 14:20:29.431919 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 14:20:32.605892 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 14:20:33.153317 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl44YhPsHRVAc81jVCSpgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem [Sat Feb 21 14:20:33.153419 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl44YhPsHRVAc81jVCSpgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem [Sat Feb 21 14:20:35.021572 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl44i_6Hqts6s-LNdApCwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:20:35.021699 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl44i_6Hqts6s-LNdApCwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:20:35.365158 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 14:20:37.721050 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 14:20:40.372808 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 98.175.31.222:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 14:20:48.541268 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl48AucuRjmpRitlBtTsAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 14:20:48.541348 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl48AucuRjmpRitlBtTsAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 14:20:58.956797 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4-unNlyfrsrZbi4_3pQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:20:58.956925 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl4-unNlyfrsrZbi4_3pQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:21:17.094222 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:21:17.106894 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:21:31.138473 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5G6Q5aTok73OU13HFRAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:21:31.138557 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5G6Q5aTok73OU13HFRAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:21:33.702462 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5HaQ5aTok73OU13HFRQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 14:21:33.702537 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5HaQ5aTok73OU13HFRQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 14:21:39.989997 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5I1QdZ64h20JcCSo53wAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:21:39.990077 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5I1QdZ64h20JcCSo53wAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:21:51.242378 2026] [cgi:error] [pid 1994661:tid 1994661] [client 20.219.8.79:0] AH02812: stderr from /home/scienceonstage/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 14:22:06.355650 2026] [security2:error] [pid 1988869:tid 1988869] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "www.science-on-stage.sk"] [uri "/index.php"] [unique_id "aZl5PQucuRjmpRitlBtT2wAAAAA"] [Sat Feb 21 14:22:06.355739 2026] [security2:error] [pid 1988869:tid 1988869] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "www.science-on-stage.sk"] [uri "/index.php"] [unique_id "aZl5PQucuRjmpRitlBtT2wAAAAA"] [Sat Feb 21 14:22:19.331244 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5S-nNlyfrsrZbi4_31AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2Fhome%2Foneboxpk%2F.nvm%2Ftest [Sat Feb 21 14:22:19.331351 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5S-nNlyfrsrZbi4_31AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2Fhome%2Foneboxpk%2F.nvm%2Ftest [Sat Feb 21 14:22:27.734359 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5UzcQ3FFpkVv1wBBqFQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 14:22:27.734440 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5UzcQ3FFpkVv1wBBqFQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 14:22:42.850799 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5YqQ5aTok73OU13HFawAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:22:42.850902 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5YqQ5aTok73OU13HFawAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:23:50.901670 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5pi_6Hqts6s-LNdApagAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:23:50.901787 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5pi_6Hqts6s-LNdApagAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:24:02.445886 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 207.180.224.115:0] AH01797: client denied by server configuration: /home/vascardmedical/public_html/wp-content/uploads/wc-logs/, referer: binance.com [Sat Feb 21 14:24:02.451398 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 207.180.224.115:0] AH01797: client denied by server configuration: /home/vascardmedical/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 14:24:18.189411 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5wq8gu0emly5i5ypgkAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 14:24:18.189515 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl5wq8gu0emly5i5ypgkAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 14:24:27.164066 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 14:24:44.123270 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl53FQdZ64h20JcCSo6OQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:24:44.123344 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl53FQdZ64h20JcCSo6OQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:24:46.423998 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:24:47.854936 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-admin/maint/error_log, referer: binance.com [Sat Feb 21 14:25:01.980879 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl57TcQ3FFpkVv1wBBqWAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem [Sat Feb 21 14:25:01.980986 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl57TcQ3FFpkVv1wBBqWAAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem [Sat Feb 21 14:25:18.452109 2026] [security2:error] [pid 2012011:tid 2012011] [client 159.223.10.24:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-global": Permission denied [hostname "mrxdt.com"] [uri "/wp-login.php"] [unique_id "aZl5_i_6Hqts6s-LNdApkwAAAAk"] [Sat Feb 21 14:25:18.452236 2026] [security2:error] [pid 2012011:tid 2012011] [client 159.223.10.24:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-ip": Permission denied [hostname "mrxdt.com"] [uri "/wp-login.php"] [unique_id "aZl5_i_6Hqts6s-LNdApkwAAAAk"] [Sat Feb 21 14:25:18.452347 2026] [security2:error] [pid 2012011:tid 2012011] [client 159.223.10.24:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1425 (Permission denied) [hostname "mrxdt.com"] [uri "/wp-login.php"] [unique_id "aZl5_i_6Hqts6s-LNdApkwAAAAk"] [Sat Feb 21 14:25:30.788949 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6CunNlyfrsrZbi4_4JgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fpower [Sat Feb 21 14:25:30.789109 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6CunNlyfrsrZbi4_4JgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fpower [Sat Feb 21 14:25:33.469780 2026] [proxy_fcgi:error] [pid 2022635:tid 2022635] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:33.721522 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:33.965821 2026] [proxy_fcgi:error] [pid 2009550:tid 2009550] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:34.211493 2026] [proxy_fcgi:error] [pid 1988869:tid 1988869] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:34.465061 2026] [proxy_fcgi:error] [pid 2021783:tid 2021783] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:34.713801 2026] [proxy_fcgi:error] [pid 2022635:tid 2022635] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:34.961624 2026] [proxy_fcgi:error] [pid 2012011:tid 2012011] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:35.210523 2026] [proxy_fcgi:error] [pid 2009550:tid 2009550] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:35.469565 2026] [proxy_fcgi:error] [pid 1994661:tid 1994661] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:35.717589 2026] [proxy_fcgi:error] [pid 1949603:tid 1949603] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:35.972951 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:36.229271 2026] [proxy_fcgi:error] [pid 2002659:tid 2002659] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:36.474008 2026] [proxy_fcgi:error] [pid 1988869:tid 1988869] [client 20.89.58.48:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:25:39.068104 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6EpmrwNtK8g_1R7xTsAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:25:39.068240 2026] [security2:error] [pid 2009550:tid 2009550] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6EpmrwNtK8g_1R7xTsAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:25:51.050319 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:25:57.033246 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6JC_6Hqts6s-LNdAppgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 14:25:57.033347 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6JC_6Hqts6s-LNdAppgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 14:26:08.188404 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6MC_6Hqts6s-LNdApqwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:26:08.188511 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6MC_6Hqts6s-LNdApqwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:26:11.609746 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6M-Ir-8fgvpvBQQ2-WgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:26:11.609862 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6M-Ir-8fgvpvBQQ2-WgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:27:01.183306 2026] [authz_core:error] [pid 2021783:tid 2021783] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 14:27:11.492208 2026] [access_compat:error] [pid 2009550:tid 2009550] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:27:12.192876 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6cIhPsHRVAc81jVCTXwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:27:12.193004 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6cIhPsHRVAc81jVCTXwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:27:34.716380 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6hi_6Hqts6s-LNdAp0AAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:27:34.716453 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6hi_6Hqts6s-LNdAp0AAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:27:34.726867 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 14:27:48.228497 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 14:27:52.540943 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6mKQ5aTok73OU13HF8gAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:27:52.541035 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6mKQ5aTok73OU13HF8gAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:27:59.475543 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6n-nNlyfrsrZbi4_4ZgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:27:59.475627 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl6n-nNlyfrsrZbi4_4ZgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:28:04.408267 2026] [security2:error] [pid 2009550:tid 2009550] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZl6pJmrwNtK8g_1R7xT7wAAAAE"] [Sat Feb 21 14:28:04.408345 2026] [security2:error] [pid 2009550:tid 2009550] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZl6pJmrwNtK8g_1R7xT7wAAAAE"] [Sat Feb 21 14:28:58.540443 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:29:01.621239 2026] [cgi:error] [pid 1988869:tid 1988869] [client 207.180.224.115:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: PHP Fatal error: Uncaught Error: Undefined constant "ABSPATH" in /home/vascardmedical/public_html/wp-includes/blocks/index.php:9, referer: binance.com [Sat Feb 21 14:29:01.621383 2026] [cgi:error] [pid 1988869:tid 1988869] [client 207.180.224.115:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: Stack trace:, referer: binance.com [Sat Feb 21 14:29:01.621410 2026] [cgi:error] [pid 1988869:tid 1988869] [client 207.180.224.115:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: #0 {main}, referer: binance.com [Sat Feb 21 14:29:01.621579 2026] [cgi:error] [pid 1988869:tid 1988869] [client 207.180.224.115:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: thrown in /home/vascardmedical/public_html/wp-includes/blocks/index.php on line 9, referer: binance.com [Sat Feb 21 14:29:07.065747 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/pomo/error_log, referer: binance.com [Sat Feb 21 14:29:30.778815 2026] [authz_core:error] [pid 1994661:tid 1994661] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 14:29:42.549894 2026] [authz_core:error] [pid 2022635:tid 2022635] [client 207.180.224.115:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 14:30:09.519936 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7Ia8gu0emly5i5yphOAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:30:09.520029 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7Ia8gu0emly5i5yphOAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:30:11.515956 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:30:11.577453 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:30:15.741475 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7JzcQ3FFpkVv1wBBq8wAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 14:30:15.741564 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7JzcQ3FFpkVv1wBBq8wAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop2%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 14:30:45.860947 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7RTcQ3FFpkVv1wBBrAQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:30:45.861014 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7RTcQ3FFpkVv1wBBrAQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:31:01.480738 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7Va8gu0emly5i5yphTQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:31:01.480821 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7Va8gu0emly5i5yphTQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 14:31:24.085953 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:32:05.201385 2026] [security2:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/wp-cron.php"] [unique_id "aZl7k-Ir-8fgvpvBQQ2_AgAAAAM"] [Sat Feb 21 14:32:05.201685 2026] [security2:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/wp-cron.php"] [unique_id "aZl7k-Ir-8fgvpvBQQ2_AgAAAAM"] [Sat Feb 21 14:32:11.428757 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7m-nNlyfrsrZbi4_44wAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:32:11.428854 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7m-nNlyfrsrZbi4_44wAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:32:22.730262 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7puIr-8fgvpvBQQ2_CQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:32:22.730332 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7puIr-8fgvpvBQQ2_CQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:32:26.797236 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:32:36.648073 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:33:09.293857 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl71enNlyfrsrZbi4_4_QAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop7 [Sat Feb 21 14:33:09.293997 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl71enNlyfrsrZbi4_4_QAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Floop7 [Sat Feb 21 14:33:18.830121 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl73i_6Hqts6s-LNdAqcgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:33:18.830217 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl73i_6Hqts6s-LNdAqcgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:33:28.857838 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl76OnNlyfrsrZbi4_5BgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:33:28.857958 2026] [security2:error] [pid 1949603:tid 1949603] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl76OnNlyfrsrZbi4_5BgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:33:29.933303 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl76YhPsHRVAc81jVCUEQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:33:29.933516 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl76YhPsHRVAc81jVCUEQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4 [Sat Feb 21 14:33:50.244710 2026] [security2:error] [pid 2012011:tid 2012011] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7_i_6Hqts6s-LNdAqgQAAAAk"] [Sat Feb 21 14:33:50.244837 2026] [security2:error] [pid 2012011:tid 2012011] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl7_i_6Hqts6s-LNdAqgQAAAAk"] [Sat Feb 21 14:33:57.192424 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:34:06.522455 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8DgucuRjmpRitlBtVKgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:34:06.522541 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8DgucuRjmpRitlBtVKgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:34:23.302092 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8HzcQ3FFpkVv1wBBrYgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 14:34:23.302182 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8HzcQ3FFpkVv1wBBrYgAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 14:34:43.628659 2026] [security2:error] [pid 1994661:tid 1994661] [client 114.119.156.134:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl8MYhPsHRVAc81jVCUMwAAAAY"], referer: https://asalinnovations.com/category/siti-di-incontri-sui-social-media-visitors-2/ [Sat Feb 21 14:34:43.628774 2026] [security2:error] [pid 1994661:tid 1994661] [client 114.119.156.134:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl8MYhPsHRVAc81jVCUMwAAAAY"], referer: https://asalinnovations.com/category/siti-di-incontri-sui-social-media-visitors-2/ [Sat Feb 21 14:34:50.131773 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com [Sat Feb 21 14:34:50.132785 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/spotlite/public_html/wp-content/uploads/wc-logs/, referer: binance.com [Sat Feb 21 14:34:50.137345 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/spotlite/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 14:34:58.269369 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 14:35:04.868269 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8SOIr-8fgvpvBQQ2_TgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:35:04.868355 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8SOIr-8fgvpvBQQ2_TgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:35:37.472592 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8aS9RbKAccNLF-QE0swAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:35:37.472677 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8aS9RbKAccNLF-QE0swAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:35:43.095358 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:35:50.573249 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8dqQ5aTok73OU13HGzAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:35:50.573328 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8dqQ5aTok73OU13HGzAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop0%2Fmq%2F0 [Sat Feb 21 14:35:51.086173 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8dlQdZ64h20JcCSo7awAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 14:35:51.086254 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8dlQdZ64h20JcCSo7awAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 14:36:02.383795 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 14:36:02.383893 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 14:36:02.383953 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 14:36:02.384428 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 14:36:02.384493 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 14:36:02.384549 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 14:36:02.385032 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 14:36:02.385077 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 14:36:02.385128 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 14:36:02.385178 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 14:36:02.385260 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 14:36:02.385304 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 14:36:02.385357 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 14:36:02.385422 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 14:36:02.385480 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 14:36:02.385518 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 14:36:02.388867 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 14:36:02.388940 2026] [authz_core:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 14:36:02.388972 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 14:36:02.389004 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 14:36:02.389034 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 14:36:02.389064 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 14:36:02.389109 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 14:36:02.389144 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 14:36:02.389176 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 14:36:02.389282 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 14:36:02.389333 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 14:36:02.389427 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 14:36:02.389521 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 216.73.216.119:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 14:36:32.903739 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8oFQdZ64h20JcCSo7ggAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:36:32.903830 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8oFQdZ64h20JcCSo7ggAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 14:36:40.251100 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8qDcQ3FFpkVv1wBBrogAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:36:40.251176 2026] [security2:error] [pid 2002659:tid 2002659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8qDcQ3FFpkVv1wBBrogAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:36:47.799258 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8rwucuRjmpRitlBtVeQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 14:36:47.799412 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl8rwucuRjmpRitlBtVeQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 14:36:50.000396 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 14:37:03.601661 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:37:04.137862 2026] [security2:error] [pid 2012077:tid 2012077] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:file: .bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZl8wFQdZ64h20JcCSo7lQAAAAs"] [Sat Feb 21 14:37:24.845978 2026] [security2:error] [pid 2012077:tid 2012077] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".bash_logout" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_logout found within ARGS:file: .bash_logout"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZl81FQdZ64h20JcCSo7owAAAAs"] [Sat Feb 21 14:37:31.970625 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:37:56.438756 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl89FQdZ64h20JcCSo7swAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 14:37:56.438903 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl89FQdZ64h20JcCSo7swAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 14:38:19.392824 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9C-Ir-8fgvpvBQQ2_uAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 14:38:19.392920 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9C-Ir-8fgvpvBQQ2_uAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 14:38:22.889149 2026] [security2:error] [pid 2012011:tid 2012011] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZl9Di_6Hqts6s-LNdArCwAAAAk"] [Sat Feb 21 14:38:22.889199 2026] [security2:error] [pid 2012011:tid 2012011] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZl9Di_6Hqts6s-LNdArCwAAAAk"] [Sat Feb 21 14:38:41.089007 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9IOIr-8fgvpvBQQ2_wgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:38:41.089105 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9IOIr-8fgvpvBQQ2_wgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:38:42.959394 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/webdb.php [Sat Feb 21 14:38:43.122275 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rip.php [Sat Feb 21 14:38:43.262460 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/a24.php [Sat Feb 21 14:38:43.382667 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bnn_.php [Sat Feb 21 14:38:43.548829 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/35.php [Sat Feb 21 14:38:43.680329 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sidfile.php [Sat Feb 21 14:38:43.816673 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rum.php [Sat Feb 21 14:38:43.944830 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/classwithtostring.php [Sat Feb 21 14:38:44.066958 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/php8.php [Sat Feb 21 14:38:44.189727 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9JC9RbKAccNLF-QE1FAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:38:44.189823 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9JC9RbKAccNLF-QE1FAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:38:44.192500 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-aoisuki.php [Sat Feb 21 14:38:44.308097 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/naritai.php [Sat Feb 21 14:38:44.678565 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/w2025.php [Sat Feb 21 14:38:44.815695 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/app.php [Sat Feb 21 14:38:44.949494 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lib.php [Sat Feb 21 14:38:45.082333 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/geaitasa.php [Sat Feb 21 14:38:45.201349 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/class-cc.php [Sat Feb 21 14:38:45.342526 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/reze.php [Sat Feb 21 14:38:45.581961 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/11092null.php [Sat Feb 21 14:38:45.722727 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ioxi-o2.php [Sat Feb 21 14:38:45.857875 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/166.php [Sat Feb 21 14:38:46.053080 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/by.php [Sat Feb 21 14:38:46.211354 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zz8.php [Sat Feb 21 14:38:46.344995 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/s1.php [Sat Feb 21 14:38:46.474332 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ah21.php [Sat Feb 21 14:38:46.637260 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ah22.php [Sat Feb 21 14:38:46.809041 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ws38.php [Sat Feb 21 14:38:46.994285 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/uploaxa1.php [Sat Feb 21 14:38:47.149153 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-su.php [Sat Feb 21 14:38:47.259889 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rzzaq.php [Sat Feb 21 14:38:47.377862 2026] [access_compat:error] [pid 1949603:tid 1949603] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/abtpn.php [Sat Feb 21 14:38:47.589776 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/my1.php [Sat Feb 21 14:38:47.724691 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/taktak.php [Sat Feb 21 14:38:47.849947 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sfcl.php [Sat Feb 21 14:38:48.098446 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ypukprhr.php [Sat Feb 21 14:38:48.241246 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 158.158.33.103:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/tcnyz.php [Sat Feb 21 14:38:57.077127 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:39:05.100855 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:39:18.486540 2026] [security2:error] [pid 2042659:tid 2042659] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".profile" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .profile found within ARGS:file: .profile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZl9RupqaXhoEVmsuSCh2gAAAAg"] [Sat Feb 21 14:39:18.717830 2026] [security2:error] [pid 2041950:tid 2041950] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".bash_history" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_history found within ARGS:file: .bash_history"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZl9RvZxBetKvu6QjGId9wAAAAE"] [Sat Feb 21 14:39:24.314204 2026] [cgi:error] [pid 2041950:tid 2041950] [client 84.247.188.147:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: PHP Fatal error: Uncaught Error: Undefined constant "ABSPATH" in /home/vascardmedical/public_html/wp-includes/blocks/index.php:9, referer: binance.com [Sat Feb 21 14:39:24.314309 2026] [cgi:error] [pid 2041950:tid 2041950] [client 84.247.188.147:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: Stack trace:, referer: binance.com [Sat Feb 21 14:39:24.314334 2026] [cgi:error] [pid 2041950:tid 2041950] [client 84.247.188.147:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: #0 {main}, referer: binance.com [Sat Feb 21 14:39:24.314443 2026] [cgi:error] [pid 2041950:tid 2041950] [client 84.247.188.147:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/ea-php83: thrown in /home/vascardmedical/public_html/wp-includes/blocks/index.php on line 9, referer: binance.com [Sat Feb 21 14:39:26.481409 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9TlQdZ64h20JcCSo74AAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:39:26.481502 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9TlQdZ64h20JcCSo74AAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:40:43.716415 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 14:40:44.760209 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9nOpqaXhoEVmsuSCiCgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:40:44.760323 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9nOpqaXhoEVmsuSCiCgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:40:45.874606 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:40:48.080535 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 14:41:15.431982 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9uy9RbKAccNLF-QE1ZgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:41:15.432109 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9uy9RbKAccNLF-QE1ZgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:41:17.717851 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/elp.php [Sat Feb 21 14:41:17.838214 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ws58.php [Sat Feb 21 14:41:17.967721 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/vx.php [Sat Feb 21 14:41:18.100732 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/motu.php [Sat Feb 21 14:41:18.210663 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ckk.php [Sat Feb 21 14:41:18.328213 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/class.php [Sat Feb 21 14:41:18.432318 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/166.php [Sat Feb 21 14:41:18.555683 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ww.php [Sat Feb 21 14:41:18.656078 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-p2r3q9c8k4.php [Sat Feb 21 14:41:18.754924 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/users.php [Sat Feb 21 14:41:18.860646 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/0x.php [Sat Feb 21 14:41:18.968666 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/baixy.php [Sat Feb 21 14:41:19.075225 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zu.php [Sat Feb 21 14:41:19.181584 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "mail.onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZl9vy_6Hqts6s-LNdArbgAAAAk"] [Sat Feb 21 14:41:19.181669 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "mail.onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZl9vy_6Hqts6s-LNdArbgAAAAk"] [Sat Feb 21 14:41:19.199845 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/kbfr.php [Sat Feb 21 14:41:19.307819 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/f35.php [Sat Feb 21 14:41:19.464658 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/click.php [Sat Feb 21 14:41:19.579846 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/a332.php [Sat Feb 21 14:41:19.687698 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bootstrap.php [Sat Feb 21 14:41:19.795920 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/f2.php [Sat Feb 21 14:41:19.900945 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/to.php [Sat Feb 21 14:41:20.034028 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/inege.php [Sat Feb 21 14:41:20.155075 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/thui.php [Sat Feb 21 14:41:20.267277 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/8.php [Sat Feb 21 14:41:20.368925 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/fresh3.php [Sat Feb 21 14:41:20.484411 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/selesai.php [Sat Feb 21 14:41:20.599456 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xs.php [Sat Feb 21 14:41:20.719912 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/maraz.php [Sat Feb 21 14:41:20.839721 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ws66.php [Sat Feb 21 14:41:20.968194 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/aa.php [Sat Feb 21 14:41:21.066793 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/erty.php [Sat Feb 21 14:41:21.188903 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/24.php [Sat Feb 21 14:41:21.303769 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bzjdlofz.php [Sat Feb 21 14:41:21.419916 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sbhu.php [Sat Feb 21 14:41:21.542346 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-blogs.php [Sat Feb 21 14:41:21.649866 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/fetch.php [Sat Feb 21 14:41:21.760086 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bolt.php [Sat Feb 21 14:41:21.878910 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/tfm.php [Sat Feb 21 14:41:21.993454 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ak.php [Sat Feb 21 14:41:22.111870 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-style.php [Sat Feb 21 14:41:22.269627 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/error_log.php [Sat Feb 21 14:41:22.480081 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/0x0x.php [Sat Feb 21 14:41:22.612561 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/0byte.php [Sat Feb 21 14:41:22.717579 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/a4.php [Sat Feb 21 14:41:22.825090 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/logs1.php [Sat Feb 21 14:41:22.938351 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/35.php [Sat Feb 21 14:41:23.039835 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lanka.php [Sat Feb 21 14:41:23.146176 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/knmt.php [Sat Feb 21 14:41:23.252270 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ioxi.php [Sat Feb 21 14:41:23.351501 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lkui.php [Sat Feb 21 14:41:23.448615 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/grsiuk.php [Sat Feb 21 14:41:23.687495 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/Geforce.php [Sat Feb 21 14:41:23.796856 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/easy.php [Sat Feb 21 14:41:23.913133 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/s1.php [Sat Feb 21 14:41:24.048021 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/cc13.php [Sat Feb 21 14:41:24.149585 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/06.php [Sat Feb 21 14:41:24.254871 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/t.php [Sat Feb 21 14:41:24.363699 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/export.php [Sat Feb 21 14:41:24.500883 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xxw.php [Sat Feb 21 14:41:24.608841 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/term.php [Sat Feb 21 14:41:24.735221 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/num.php [Sat Feb 21 14:41:24.867543 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/file.php [Sat Feb 21 14:41:24.978882 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/403.php [Sat Feb 21 14:41:25.090918 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ccu.php [Sat Feb 21 14:41:25.200653 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/155.php [Sat Feb 21 14:41:25.303112 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xsox.php [Sat Feb 21 14:41:25.419696 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wen.php [Sat Feb 21 14:41:25.522289 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bgymj.php [Sat Feb 21 14:41:25.628974 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gk.php [Sat Feb 21 14:41:25.747555 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zoo.php [Sat Feb 21 14:41:25.882228 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zxekqlxb.php [Sat Feb 21 14:41:26.009097 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-scr1pts.php [Sat Feb 21 14:41:26.113607 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/shlo.php [Sat Feb 21 14:41:26.228021 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gdn.php [Sat Feb 21 14:41:26.347512 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/6bcwiqwj.php [Sat Feb 21 14:41:26.461547 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/mar.php [Sat Feb 21 14:41:26.571035 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ws69.php [Sat Feb 21 14:41:26.679510 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/amp.php [Sat Feb 21 14:41:26.834131 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gettest.php [Sat Feb 21 14:41:26.970782 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/Jcrop.php [Sat Feb 21 14:41:27.085028 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-act.php [Sat Feb 21 14:41:27.196744 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-link10.php [Sat Feb 21 14:41:27.383924 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ff1.php [Sat Feb 21 14:41:27.725914 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lib.php [Sat Feb 21 14:41:27.833559 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/Ov-Simple1.php [Sat Feb 21 14:41:27.958675 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ccs.php [Sat Feb 21 14:41:28.059669 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/mini.php [Sat Feb 21 14:41:28.165911 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xr.php [Sat Feb 21 14:41:28.285867 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rtx.php [Sat Feb 21 14:41:28.397500 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/666.php [Sat Feb 21 14:41:28.499568 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/h2a2ck.php [Sat Feb 21 14:41:28.600488 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/cytyr.php [Sat Feb 21 14:41:28.717031 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/h02ugyh.php [Sat Feb 21 14:41:28.833980 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/66.php [Sat Feb 21 14:41:28.969286 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/init.php [Sat Feb 21 14:41:29.084112 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ava.php [Sat Feb 21 14:41:29.222619 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/inc.php [Sat Feb 21 14:41:29.337418 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ws68.php [Sat Feb 21 14:41:29.451391 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/w1px.php [Sat Feb 21 14:41:29.551809 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ms.php [Sat Feb 21 14:41:29.684012 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/asax.php [Sat Feb 21 14:41:29.805358 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/galer.php [Sat Feb 21 14:41:29.915512 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/fs.php [Sat Feb 21 14:41:30.029960 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/browse.php [Sat Feb 21 14:41:30.148574 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/aaa.php [Sat Feb 21 14:41:30.269850 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/global.php [Sat Feb 21 14:41:30.374461 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.188.56.166:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/R57.php [Sat Feb 21 14:41:30.868892 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9yuIr-8fgvpvBQQ3AKQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:41:30.869028 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl9yuIr-8fgvpvBQQ3AKQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:41:46.529604 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 14:41:51.154481 2026] [authz_core:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/spotlite/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 14:41:51.595244 2026] [security2:error] [pid 2041950:tid 2041950] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl93_ZxBetKvu6QjGIeVAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:41:51.595306 2026] [security2:error] [pid 2041950:tid 2041950] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl93_ZxBetKvu6QjGIeVAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:42:27.480268 2026] [security2:error] [pid 2041950:tid 2041950] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-A_ZxBetKvu6QjGIeYwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:42:27.480346 2026] [security2:error] [pid 2041950:tid 2041950] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-A_ZxBetKvu6QjGIeYwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:42:31.635587 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-B-pqaXhoEVmsuSCiTAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:42:31.635653 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-B-pqaXhoEVmsuSCiTAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:42:47.045898 2026] [security2:error] [pid 2022635:tid 2022635] [client 87.121.217.152:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-global": Permission denied [hostname "edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl-FqQ5aTok73OU13HHogAAAAI"] [Sat Feb 21 14:42:47.046011 2026] [security2:error] [pid 2022635:tid 2022635] [client 87.121.217.152:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-ip": Permission denied [hostname "edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl-FqQ5aTok73OU13HHogAAAAI"] [Sat Feb 21 14:43:26.335515 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-Pi_6Hqts6s-LNdArsgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:43:26.335652 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-Pi_6Hqts6s-LNdArsgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:44:08.352560 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.php, referer: binance.com [Sat Feb 21 14:44:08.353642 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.php5, referer: binance.com [Sat Feb 21 14:44:08.354179 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.phtml, referer: binance.com [Sat Feb 21 14:44:13.515667 2026] [access_compat:error] [pid 2041950:tid 2041950] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:44:14.365725 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-blQdZ64h20JcCSo8gwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 14:44:14.365877 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-blQdZ64h20JcCSo8gwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 14:44:54.047372 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-lS_6Hqts6s-LNdAr6AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:44:54.047469 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-lS_6Hqts6s-LNdAr6AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:45:15.099007 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:45:15.710068 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-q6Q5aTok73OU13HH9QAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fpower [Sat Feb 21 14:45:15.710178 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-q6Q5aTok73OU13HH9QAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fpower [Sat Feb 21 14:45:40.837208 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-xOIr-8fgvpvBQQ3ApwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:45:40.837323 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-xOIr-8fgvpvBQQ3ApwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:45:56.648786 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/about.php"] [unique_id "aZl-1FQdZ64h20JcCSo8tQAAAAs"] [Sat Feb 21 14:45:56.648871 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/about.php"] [unique_id "aZl-1FQdZ64h20JcCSo8tQAAAAs"] [Sat Feb 21 14:46:03.074352 2026] [security2:error] [pid 2042659:tid 2042659] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/wp-blog.php"] [unique_id "aZl-2-pqaXhoEVmsuSCivAAAAAg"] [Sat Feb 21 14:46:03.074449 2026] [security2:error] [pid 2042659:tid 2042659] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/wp-blog.php"] [unique_id "aZl-2-pqaXhoEVmsuSCivAAAAAg"] [Sat Feb 21 14:46:10.460973 2026] [security2:error] [pid 2041950:tid 2041950] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZl-4vZxBetKvu6QjGIe4AAAAAE"] [Sat Feb 21 14:46:10.461046 2026] [security2:error] [pid 2041950:tid 2041950] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aZl-4vZxBetKvu6QjGIe4AAAAAE"] [Sat Feb 21 14:46:11.005707 2026] [security2:error] [pid 2042659:tid 2042659] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/admin/uploads/"] [unique_id "aZl-4-pqaXhoEVmsuSCixQAAAAg"] [Sat Feb 21 14:46:11.005770 2026] [security2:error] [pid 2042659:tid 2042659] [client 20.219.8.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "healthcare.247reactionpower.com"] [uri "/admin/uploads/"] [unique_id "aZl-4-pqaXhoEVmsuSCixQAAAAg"] [Sat Feb 21 14:46:17.181204 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-6aQ5aTok73OU13HIHgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:46:17.181339 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl-6aQ5aTok73OU13HIHgAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:46:27.294768 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:46:54.481280 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_DqQ5aTok73OU13HILwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:46:54.481488 2026] [security2:error] [pid 2022635:tid 2022635] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_DqQ5aTok73OU13HILwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:46:54.935589 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_DupqaXhoEVmsuSCi3QAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:46:54.935676 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_DupqaXhoEVmsuSCi3QAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:46:55.267898 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_D4hPsHRVAc81jVCVyAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:46:55.268018 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_D4hPsHRVAc81jVCVyAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:46:56.485025 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/02/index.php, referer: binance.com [Sat Feb 21 14:46:56.485416 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/02/index.php5, referer: binance.com [Sat Feb 21 14:46:56.486224 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/02/index.phtml, referer: binance.com [Sat Feb 21 14:47:03.222647 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/01/index.php, referer: binance.com [Sat Feb 21 14:47:03.223086 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/01/index.php5, referer: binance.com [Sat Feb 21 14:47:03.223898 2026] [access_compat:error] [pid 2022635:tid 2022635] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/2026/01/index.phtml, referer: binance.com [Sat Feb 21 14:47:03.539468 2026] [authz_core:error] [pid 2039657:tid 2039657] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/serversvalley/public_html/blog/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 14:47:05.451241 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_GS_6Hqts6s-LNdAsNgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 14:47:05.451339 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_GS_6Hqts6s-LNdAsNgAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 14:47:11.017083 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/index.php, referer: binance.com [Sat Feb 21 14:47:11.017390 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/index.php5, referer: binance.com [Sat Feb 21 14:47:11.017918 2026] [access_compat:error] [pid 1988869:tid 1988869] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/uploads/index.phtml, referer: binance.com [Sat Feb 21 14:47:15.863336 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/upgrade/index.php, referer: binance.com [Sat Feb 21 14:47:15.863719 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/upgrade/index.php5, referer: binance.com [Sat Feb 21 14:47:15.864412 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/upgrade/index.phtml, referer: binance.com [Sat Feb 21 14:47:19.565390 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/languages/index.php5, referer: binance.com [Sat Feb 21 14:47:19.566202 2026] [access_compat:error] [pid 2042659:tid 2042659] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/languages/index.phtml, referer: binance.com [Sat Feb 21 14:47:23.709403 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 14:47:31.674402 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_MwucuRjmpRitlBtW2AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:47:31.674535 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_MwucuRjmpRitlBtW2AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:47:45.900508 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_QYhPsHRVAc81jVCV4wAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:47:45.900721 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_QYhPsHRVAc81jVCV4wAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:47:50.652372 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_RgucuRjmpRitlBtW4QAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:47:50.652515 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_RgucuRjmpRitlBtW4QAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:48:08.510093 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:48:20.094780 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/serversvalley/public_html/blog/wp-includes/error_log, referer: binance.com [Sat Feb 21 14:48:26.035970 2026] [security2:error] [pid 2029018:tid 2029018] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/wp-admin/user/index.php"] [unique_id "aZl_aOIr-8fgvpvBQQ3BAgAAAAM"], referer: binance.com [Sat Feb 21 14:48:26.036070 2026] [security2:error] [pid 2029018:tid 2029018] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/wp-admin/user/index.php"] [unique_id "aZl_aOIr-8fgvpvBQQ3BAgAAAAM"], referer: binance.com [Sat Feb 21 14:48:26.468371 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_agucuRjmpRitlBtW9gAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:48:26.468456 2026] [security2:error] [pid 1988869:tid 1988869] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_agucuRjmpRitlBtW9gAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:48:26.799478 2026] [security2:error] [pid 2012077:tid 2012077] [client 192.140.151.66:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/wp-content/plugins/elementor/assets/css/widget-image.min.css"] [unique_id "aZl_alQdZ64h20JcCSo9DQAAAAs"], referer: https://www.3mlittmann.us/register-products/ [Sat Feb 21 14:48:26.799532 2026] [security2:error] [pid 2012077:tid 2012077] [client 192.140.151.66:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/wp-content/plugins/elementor/assets/css/widget-image.min.css"] [unique_id "aZl_alQdZ64h20JcCSo9DQAAAAs"], referer: https://www.3mlittmann.us/register-products/ [Sat Feb 21 14:48:27.599785 2026] [authz_core:error] [pid 2022635:tid 2022635] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/serversvalley/public_html/blog/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 14:48:40.180750 2026] [authz_core:error] [pid 2039657:tid 2039657] [client 91.92.242.178:0] AH01630: client denied by server configuration: /home/scienceonstage/public_html/denederveensehoevesite.nl/wp-content/uploads/wpcf7_uploads/ [Sat Feb 21 14:48:40.188572 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 91.92.242.178:0] AH01797: client denied by server configuration: /home/scienceonstage/public_html/denederveensehoevesite.nl/wp-content/uploads/wpcf7_captcha/ [Sat Feb 21 14:48:48.913750 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_gOpqaXhoEVmsuSCjIAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:48:48.913831 2026] [security2:error] [pid 2042659:tid 2042659] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_gOpqaXhoEVmsuSCjIAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:48:52.228102 2026] [security2:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "blog.serversvalley.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl_hFQdZ64h20JcCSo9IgAAAAs"], referer: binance.com [Sat Feb 21 14:48:52.228164 2026] [security2:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "blog.serversvalley.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl_hFQdZ64h20JcCSo9IgAAAAs"], referer: binance.com [Sat Feb 21 14:48:53.640065 2026] [authz_core:error] [pid 2021783:tid 2021783] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/serversvalley/public_html/blog/wp-includes/pomo/error_log, referer: binance.com [Sat Feb 21 14:49:09.460897 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_lVQdZ64h20JcCSo9KgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:49:09.460981 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_lVQdZ64h20JcCSo9KgAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 14:49:12.638047 2026] [security2:error] [pid 2047465:tid 2047465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_mF-b4-z0qtCXxlXcdQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:49:12.638151 2026] [security2:error] [pid 2047465:tid 2047465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_mF-b4-z0qtCXxlXcdQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:49:12.750711 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:49:15.903282 2026] [access_compat:error] [pid 2047465:tid 2047465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:49:21.324884 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 14:49:21.476695 2026] [authz_core:error] [pid 2047465:tid 2047465] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/serversvalley/public_html/blog/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 14:49:33.953551 2026] [security2:error] [pid 1994661:tid 1994661] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZl_rIhPsHRVAc81jVCWFwAAAAY"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:49:33.953669 2026] [security2:error] [pid 1994661:tid 1994661] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZl_rIhPsHRVAc81jVCWFwAAAAY"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:49:42.709017 2026] [security2:error] [pid 2022635:tid 2022635] [client 136.144.33.150:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZl_tKQ5aTok73OU13HIkAAAAAI"] [Sat Feb 21 14:49:42.709271 2026] [security2:error] [pid 2022635:tid 2022635] [client 136.144.33.150:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZl_tKQ5aTok73OU13HIkAAAAAI"] [Sat Feb 21 14:49:45.471095 2026] [security2:error] [pid 2029018:tid 2029018] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl_t-Ir-8fgvpvBQQ3BMwAAAAM"] [Sat Feb 21 14:49:45.471180 2026] [security2:error] [pid 2029018:tid 2029018] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl_t-Ir-8fgvpvBQQ3BMwAAAAM"] [Sat Feb 21 14:49:50.660797 2026] [proxy_fcgi:error] [pid 2048084:tid 2048084] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:50.924765 2026] [proxy_fcgi:error] [pid 2047846:tid 2047846] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:51.193695 2026] [proxy_fcgi:error] [pid 2022635:tid 2022635] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:51.462164 2026] [proxy_fcgi:error] [pid 2042659:tid 2042659] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:51.699388 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:51.933564 2026] [proxy_fcgi:error] [pid 2047846:tid 2047846] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:52.206013 2026] [proxy_fcgi:error] [pid 2022635:tid 2022635] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:52.439827 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:53.156849 2026] [proxy_fcgi:error] [pid 2021783:tid 2021783] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:53.393459 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:53.801833 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:49:53.955747 2026] [proxy_fcgi:error] [pid 2029018:tid 2029018] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:58.571936 2026] [proxy_fcgi:error] [pid 2047465:tid 2047465] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:58.815842 2026] [proxy_fcgi:error] [pid 2041950:tid 2041950] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:59.371132 2026] [proxy_fcgi:error] [pid 2048084:tid 2048084] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:59.604783 2026] [proxy_fcgi:error] [pid 2041950:tid 2041950] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:49:59.875160 2026] [proxy_fcgi:error] [pid 2047465:tid 2047465] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:00.163586 2026] [proxy_fcgi:error] [pid 2041950:tid 2041950] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:00.439817 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:00.676666 2026] [proxy_fcgi:error] [pid 2042659:tid 2042659] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:01.193542 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:02.196058 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.78.146.86:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/pebitech-global": Permission denied [hostname "pebi.tech"] [uri "/modules/mod_simplefileuploadv1.3/elements/file.php/aa.php"] [unique_id "aZl_ylQdZ64h20JcCSo9SgAAAAs"] [Sat Feb 21 14:50:02.196152 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.78.146.86:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/pebitech-ip": Permission denied [hostname "pebi.tech"] [uri "/modules/mod_simplefileuploadv1.3/elements/file.php/aa.php"] [unique_id "aZl_ylQdZ64h20JcCSo9SgAAAAs"] [Sat Feb 21 14:50:02.702631 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:02.953832 2026] [proxy_fcgi:error] [pid 2041950:tid 2041950] [client 20.78.146.86:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 14:50:04.813443 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:50:11.097019 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_068gu0emly5i5ypjuAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:50:11.097092 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_068gu0emly5i5ypjuAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:50:17.571421 2026] [security2:error] [pid 2021783:tid 2021783] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl_168gu0emly5i5ypjwAAAAAU"] [Sat Feb 21 14:50:17.571478 2026] [security2:error] [pid 2021783:tid 2021783] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZl_168gu0emly5i5ypjwAAAAAU"] [Sat Feb 21 14:50:18.835313 2026] [security2:error] [pid 2041950:tid 2041950] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "www.link.cybercraft.biz"] [uri "/index.php"] [unique_id "aZl_2vZxBetKvu6QjGIffgAAAAE"] [Sat Feb 21 14:50:18.835402 2026] [security2:error] [pid 2041950:tid 2041950] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "www.link.cybercraft.biz"] [uri "/index.php"] [unique_id "aZl_2vZxBetKvu6QjGIffgAAAAE"] [Sat Feb 21 14:50:47.405849 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_94hPsHRVAc81jVCWUQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:50:47.405939 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZl_94hPsHRVAc81jVCWUQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:51:05.426582 2026] [access_compat:error] [pid 2047465:tid 2047465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:51:20.400604 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAGIhPsHRVAc81jVCWZwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:51:20.400731 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAGIhPsHRVAc81jVCWZwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:51:31.402741 2026] [security2:error] [pid 2021783:tid 2021783] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZmAI68gu0emly5i5ypj7wAAAAU"] [Sat Feb 21 14:51:31.402809 2026] [security2:error] [pid 2021783:tid 2021783] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aZmAI68gu0emly5i5ypj7wAAAAU"] [Sat Feb 21 14:51:35.236113 2026] [security2:error] [pid 2048084:tid 2048084] [client 216.40.73.85:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-global": Permission denied [hostname "medimage.com.pk"] [uri "/index.php"] [unique_id "aZmAJT_rFMzliJFSNigGVAAAAAo"], referer: https://www.google.com [Sat Feb 21 14:51:35.236207 2026] [security2:error] [pid 2048084:tid 2048084] [client 216.40.73.85:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-ip": Permission denied [hostname "medimage.com.pk"] [uri "/index.php"] [unique_id "aZmAJT_rFMzliJFSNigGVAAAAAo"], referer: https://www.google.com [Sat Feb 21 14:51:51.936197 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:51:52.937385 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:52:00.070861 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAP68gu0emly5i5ypj_AAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:52:00.070939 2026] [security2:error] [pid 2021783:tid 2021783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAP68gu0emly5i5ypj_AAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:52:02.245431 2026] [security2:error] [pid 2048946:tid 2048946] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmAQA6zZrsiEKn4Yr9SYQAAAAA"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:52:02.245528 2026] [security2:error] [pid 2048946:tid 2048946] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmAQA6zZrsiEKn4Yr9SYQAAAAA"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:52:03.547677 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 14:52:11.957135 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:52:32.457030 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAYMrssm78_TCE3WXD_QAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:52:32.457168 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAYMrssm78_TCE3WXD_QAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5 [Sat Feb 21 14:52:46.845862 2026] [access_compat:error] [pid 2021783:tid 2021783] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:52:54.103666 2026] [authz_core:error] [pid 2048084:tid 2048084] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 14:53:00.497785 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/protecprtmybills/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 14:53:16.036515 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAiy9RbKAccNLF-QE3FgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:53:16.036583 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAiy9RbKAccNLF-QE3FgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:53:21.297994 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/hello.world"] [unique_id "aZmAkepqaXhoEVmsuSCjwwAAAAg"] [Sat Feb 21 14:53:21.298143 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/hello.world"] [unique_id "aZmAkepqaXhoEVmsuSCjwwAAAAg"] [Sat Feb 21 14:53:22.237401 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/"] [unique_id "aZmAkg6zZrsiEKn4Yr9SkAAAAAA"] [Sat Feb 21 14:53:22.237533 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/"] [unique_id "aZmAkg6zZrsiEKn4Yr9SkAAAAAA"] [Sat Feb 21 14:53:23.080360 2026] [security2:error] [pid 2012011:tid 2012011] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAky_6Hqts6s-LNdAtEQAAAAk"] [Sat Feb 21 14:53:23.891179 2026] [security2:error] [pid 2049075:tid 2049075] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZmAk8rssm78_TCE3WXEHAAAAAI"] [Sat Feb 21 14:53:24.749377 2026] [security2:error] [pid 2039657:tid 2039657] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAlC9RbKAccNLF-QE3HAAAAAc"] [Sat Feb 21 14:53:25.820444 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZmAlSzqxU5GGBTajpHcVAAAAAE"] [Sat Feb 21 14:53:26.819577 2026] [security2:error] [pid 2012011:tid 2012011] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aZmAli_6Hqts6s-LNdAtFAAAAAk"] [Sat Feb 21 14:53:27.804573 2026] [security2:error] [pid 2049075:tid 2049075] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAl8rssm78_TCE3WXEHwAAAAI"] [Sat Feb 21 14:53:28.698273 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAmA6zZrsiEKn4Yr9SlAAAAAA"] [Sat Feb 21 14:53:29.639918 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZmAmSzqxU5GGBTajpHcVwAAAAE"] [Sat Feb 21 14:53:30.665527 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAmizqxU5GGBTajpHcWAAAAAE"] [Sat Feb 21 14:53:31.632570 2026] [security2:error] [pid 2048084:tid 2048084] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZmAmz_rFMzliJFSNigGkQAAAAo"] [Sat Feb 21 14:53:32.790117 2026] [security2:error] [pid 1994661:tid 1994661] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAnIhPsHRVAc81jVCWqQAAAAY"] [Sat Feb 21 14:53:33.757140 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZmAnepqaXhoEVmsuSCjyQAAAAg"] [Sat Feb 21 14:53:34.679975 2026] [security2:error] [pid 2021783:tid 2021783] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAnq8gu0emly5i5ypkMwAAAAU"] [Sat Feb 21 14:53:35.656500 2026] [security2:error] [pid 2029018:tid 2029018] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmAnuIr-8fgvpvBQQ3BwQAAAAM"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:53:35.656586 2026] [security2:error] [pid 2029018:tid 2029018] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmAnuIr-8fgvpvBQQ3BwQAAAAM"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:53:35.697519 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZmAn-pqaXhoEVmsuSCjywAAAAg"] [Sat Feb 21 14:53:36.362485 2026] [security2:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmAnohPsHRVAc81jVCWqgAAAAY"], referer: binance.com [Sat Feb 21 14:53:36.362561 2026] [security2:error] [pid 1994661:tid 1994661] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmAnohPsHRVAc81jVCWqgAAAAY"], referer: binance.com [Sat Feb 21 14:53:36.638272 2026] [security2:error] [pid 2039657:tid 2039657] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAoC9RbKAccNLF-QE3JAAAAAc"] [Sat Feb 21 14:53:37.031043 2026] [security2:error] [pid 2021783:tid 2021783] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmAn68gu0emly5i5ypkNAAAAAU"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:53:37.031122 2026] [security2:error] [pid 2021783:tid 2021783] [client 176.65.132.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmAn68gu0emly5i5ypkNAAAAAU"], referer: https://alliancechem-eng.com/wp-login.php [Sat Feb 21 14:53:37.719087 2026] [security2:error] [pid 1994661:tid 1994661] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAoYhPsHRVAc81jVCWqwAAAAY"] [Sat Feb 21 14:53:38.695406 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAoupqaXhoEVmsuSCjzQAAAAg"] [Sat Feb 21 14:53:39.804121 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAow6zZrsiEKn4Yr9SmwAAAAA"] [Sat Feb 21 14:53:40.737773 2026] [security2:error] [pid 2048084:tid 2048084] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmApD_rFMzliJFSNigGlwAAAAo"] [Sat Feb 21 14:53:41.627268 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmApQ6zZrsiEKn4Yr9SnAAAAAA"] [Sat Feb 21 14:53:42.599864 2026] [security2:error] [pid 2029018:tid 2029018] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmApuIr-8fgvpvBQQ3BxQAAAAM"] [Sat Feb 21 14:53:43.550611 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAp-pqaXhoEVmsuSCj0AAAAAg"] [Sat Feb 21 14:53:44.589037 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAqA6zZrsiEKn4Yr9SngAAAAA"] [Sat Feb 21 14:53:45.567663 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAqSzqxU5GGBTajpHcYQAAAAE"] [Sat Feb 21 14:53:46.602549 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAqizqxU5GGBTajpHcYgAAAAE"] [Sat Feb 21 14:53:46.930296 2026] [authz_core:error] [pid 2049075:tid 2049075] [client 20.197.25.32:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/block-patterns/error_log [Sat Feb 21 14:53:47.567076 2026] [security2:error] [pid 2012011:tid 2012011] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAqy_6Hqts6s-LNdAtIgAAAAk"] [Sat Feb 21 14:53:48.517425 2026] [security2:error] [pid 2029018:tid 2029018] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmArOIr-8fgvpvBQQ3ByQAAAAM"] [Sat Feb 21 14:53:49.439134 2026] [security2:error] [pid 2039657:tid 2039657] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmArS9RbKAccNLF-QE3KgAAAAc"] [Sat Feb 21 14:53:50.588832 2026] [security2:error] [pid 2049075:tid 2049075] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmArsrssm78_TCE3WXELAAAAAI"] [Sat Feb 21 14:53:51.693076 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmArw6zZrsiEKn4Yr9SowAAAAA"] [Sat Feb 21 14:53:52.691861 2026] [security2:error] [pid 2029018:tid 2029018] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAsOIr-8fgvpvBQQ3BzAAAAAM"] [Sat Feb 21 14:53:53.802981 2026] [security2:error] [pid 2039657:tid 2039657] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAsS9RbKAccNLF-QE3LQAAAAc"] [Sat Feb 21 14:53:54.926931 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAsizqxU5GGBTajpHcZwAAAAE"] [Sat Feb 21 14:53:55.989148 2026] [security2:error] [pid 2048084:tid 2048084] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAsz_rFMzliJFSNigGoAAAAAo"] [Sat Feb 21 14:53:57.044418 2026] [security2:error] [pid 2012077:tid 2012077] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAtVQdZ64h20JcCSo93AAAAAs"] [Sat Feb 21 14:53:58.007911 2026] [security2:error] [pid 2049818:tid 2049818] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAtizqxU5GGBTajpHcaQAAAAE"] [Sat Feb 21 14:53:59.079718 2026] [security2:error] [pid 2048946:tid 2048946] [client 177.70.2.220:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.20"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmAtw6zZrsiEKn4Yr9SpwAAAAA"] [Sat Feb 21 14:54:00.071983 2026] [security2:error] [pid 2048084:tid 2048084] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAuD_rFMzliJFSNigGowAAAAo"] [Sat Feb 21 14:54:00.572747 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAuIhPsHRVAc81jVCWugAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 14:54:00.572836 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmAuIhPsHRVAc81jVCWugAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 14:54:01.058003 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/public/index.php"] [unique_id "aZmAuepqaXhoEVmsuSCj2wAAAAg"] [Sat Feb 21 14:54:02.026910 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAuupqaXhoEVmsuSCj3AAAAAg"] [Sat Feb 21 14:54:02.027022 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAuupqaXhoEVmsuSCj3AAAAAg"] [Sat Feb 21 14:54:02.027092 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create /&/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAuupqaXhoEVmsuSCj3AAAAAg"] [Sat Feb 21 14:54:02.027187 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create/&/<?echo(md5(hi)) ?>/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAuupqaXhoEVmsuSCj3AAAAAg"] [Sat Feb 21 14:54:02.027411 2026] [security2:error] [pid 2042659:tid 2042659] [client 177.70.2.220:0] ModSecurity: Warning. Pattern match "(?:<\\\\?(?!xml\\\\s)|<\\\\?php|\\\\[(?:/|\\\\\\\\)?php\\\\])" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "41"] [id "933100"] [msg "PHP Injection Attack: PHP Open Tag Found"] [data "Matched Data: <? found within ARGS_NAMES:/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php: /<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAuupqaXhoEVmsuSCj3AAAAAg"] [Sat Feb 21 14:54:03.091159 2026] [security2:error] [pid 1994661:tid 1994661] [client 177.70.2.220:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAu4hPsHRVAc81jVCWvAAAAAY"] [Sat Feb 21 14:54:03.091281 2026] [security2:error] [pid 1994661:tid 1994661] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAu4hPsHRVAc81jVCWvAAAAAY"] [Sat Feb 21 14:54:03.091348 2026] [security2:error] [pid 1994661:tid 1994661] [client 177.70.2.220:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.20"] [uri "/index.php"] [unique_id "aZmAu4hPsHRVAc81jVCWvAAAAAY"] [Sat Feb 21 14:54:15.292088 2026] [cgi:error] [pid 2039657:tid 2039657] [client 20.89.109.155:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden [Sat Feb 21 14:54:15.292416 2026] [cgi:error] [pid 2039657:tid 2039657] [client 20.89.109.155:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157. [Sat Feb 21 14:54:25.100775 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:54:25.815086 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php, referer: binance.com [Sat Feb 21 14:54:25.815206 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php8, referer: binance.com [Sat Feb 21 14:54:25.815271 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php7, referer: binance.com [Sat Feb 21 14:54:25.815332 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.php5, referer: binance.com [Sat Feb 21 14:54:25.816074 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/.well-known/index.phtml, referer: binance.com [Sat Feb 21 14:54:30.712940 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/files.php"] [unique_id "aZmA1i_6Hqts6s-LNdAtOwAAAAk"] [Sat Feb 21 14:54:30.713022 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/files.php"] [unique_id "aZmA1i_6Hqts6s-LNdAtOwAAAAk"] [Sat Feb 21 14:54:42.615773 2026] [security2:error] [pid 2042659:tid 2042659] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmA4epqaXhoEVmsuSCj9wAAAAg"] [Sat Feb 21 14:54:42.615944 2026] [security2:error] [pid 2042659:tid 2042659] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmA4epqaXhoEVmsuSCj9wAAAAg"] [Sat Feb 21 14:54:54.879273 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:55:10.781699 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.89.109.155:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "mail.247reactionpower.com"] [uri "/img.php"] [unique_id "aZmA_g6zZrsiEKn4Yr9S1wAAAAA"] [Sat Feb 21 14:55:10.781800 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.89.109.155:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "mail.247reactionpower.com"] [uri "/img.php"] [unique_id "aZmA_g6zZrsiEKn4Yr9S1wAAAAA"] [Sat Feb 21 14:55:18.165104 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:55:33.784732 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBFS_6Hqts6s-LNdAtawAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fpower [Sat Feb 21 14:55:33.784907 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBFS_6Hqts6s-LNdAtawAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fpower [Sat Feb 21 14:55:34.823190 2026] [autoindex:error] [pid 2049075:tid 2049075] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:55:38.862783 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/ova.php"] [unique_id "aZmBGg6zZrsiEKn4Yr9S6AAAAAA"] [Sat Feb 21 14:55:38.862875 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.197.25.32:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/ova.php"] [unique_id "aZmBGg6zZrsiEKn4Yr9S6AAAAAA"] [Sat Feb 21 14:55:39.407136 2026] [security2:error] [pid 1994661:tid 1994661] [client 176.31.139.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-global": Permission denied [hostname "vascardmedical.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmBGohPsHRVAc81jVCXAAAAAAY"] [Sat Feb 21 14:55:39.407229 2026] [security2:error] [pid 1994661:tid 1994661] [client 176.31.139.19:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-ip": Permission denied [hostname "vascardmedical.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmBGohPsHRVAc81jVCXAAAAAAY"] [Sat Feb 21 14:55:44.860379 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBICzqxU5GGBTajpHcrAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:55:44.860477 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBICzqxU5GGBTajpHcrAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0 [Sat Feb 21 14:56:19.008658 2026] [autoindex:error] [pid 2012011:tid 2012011] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:21.374324 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:27.950667 2026] [autoindex:error] [pid 2012077:tid 2012077] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:30.321876 2026] [autoindex:error] [pid 2050715:tid 2050715] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:34.732524 2026] [autoindex:error] [pid 2029018:tid 2029018] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:36.887484 2026] [autoindex:error] [pid 2049818:tid 2049818] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:44.661019 2026] [autoindex:error] [pid 1994661:tid 1994661] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:46.966181 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBXizqxU5GGBTajpHcygAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:56:46.966244 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBXizqxU5GGBTajpHcygAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 14:56:50.753552 2026] [autoindex:error] [pid 2049075:tid 2049075] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:56:52.994610 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBZCzqxU5GGBTajpHczgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 14:56:52.994696 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBZCzqxU5GGBTajpHczgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 14:56:56.854746 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:01.179883 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:10.212651 2026] [autoindex:error] [pid 2012077:tid 2012077] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:11.308769 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBdyzqxU5GGBTajpHc1QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:57:11.308866 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBdyzqxU5GGBTajpHc1QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:57:12.367625 2026] [autoindex:error] [pid 1994661:tid 1994661] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:14.507191 2026] [autoindex:error] [pid 2012011:tid 2012011] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:16.313177 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:57:23.544430 2026] [access_compat:error] [pid 1994661:tid 1994661] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:57:27.158296 2026] [autoindex:error] [pid 1994661:tid 1994661] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:29.155130 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 40.115.138.121:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 14:57:55.543173 2026] [security2:error] [pid 2029018:tid 2029018] [client 52.167.144.166:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZmBo-Ir-8fgvpvBQQ3CVwAAAAM"] [Sat Feb 21 14:58:04.041243 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBq1QdZ64h20JcCSo-YgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 14:58:04.041317 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmBq1QdZ64h20JcCSo-YgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 14:58:23.373446 2026] [security2:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZmBvlQdZ64h20JcCSo-bQAAAAs"] [Sat Feb 21 14:58:23.373510 2026] [security2:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZmBvlQdZ64h20JcCSo-bQAAAAs"] [Sat Feb 21 14:58:24.034681 2026] [security2:error] [pid 2048084:tid 2048084] [client 192.42.116.179:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmBvj_rFMzliJFSNigHNQAAAAo"], referer: https://arcticairandrefrigeration.com/blog [Sat Feb 21 14:58:24.034760 2026] [security2:error] [pid 2048084:tid 2048084] [client 192.42.116.179:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmBvj_rFMzliJFSNigHNQAAAAo"], referer: https://arcticairandrefrigeration.com/blog [Sat Feb 21 14:58:37.599056 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 14:58:41.882659 2026] [security2:error] [pid 2048084:tid 2048084] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmB0T_rFMzliJFSNigHQwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:58:41.882762 2026] [security2:error] [pid 2048084:tid 2048084] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmB0T_rFMzliJFSNigHQwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 14:59:22.000466 2026] [security2:error] [pid 2050715:tid 2050715] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmB-Sf3wF1Gz-LZCYLHAwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:59:22.000567 2026] [security2:error] [pid 2050715:tid 2050715] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmB-Sf3wF1Gz-LZCYLHAwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 14:59:23.032668 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmB-ohPsHRVAc81jVCXawAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fpower [Sat Feb 21 14:59:23.032752 2026] [security2:error] [pid 1994661:tid 1994661] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmB-ohPsHRVAc81jVCXawAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fpower [Sat Feb 21 14:59:29.265768 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCASzqxU5GGBTajpHdHQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 14:59:29.265828 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCASzqxU5GGBTajpHdHQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 14:59:39.365483 2026] [security2:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/nw.php"] [unique_id "aZmCCy_6Hqts6s-LNdAt8gAAAAk"] [Sat Feb 21 14:59:39.365529 2026] [security2:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/nw.php"] [unique_id "aZmCCy_6Hqts6s-LNdAt8gAAAAk"] [Sat Feb 21 14:59:47.476031 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 14:59:52.097799 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCF02JgS98vN9XlLXFfgAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:59:52.097924 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCF02JgS98vN9XlLXFfgAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 14:59:54.717856 2026] [security2:error] [pid 2048084:tid 2048084] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCGj_rFMzliJFSNigHawAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 14:59:54.717953 2026] [security2:error] [pid 2048084:tid 2048084] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCGj_rFMzliJFSNigHawAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:00:06.973460 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCJg6zZrsiEKn4Yr9TcQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:00:06.973528 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCJg6zZrsiEKn4Yr9TcQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:00:29.215499 2026] [proxy_fcgi:error] [pid 2053683:tid 2053683] [client 37.77.150.124:0] AH01071: Got error 'Primary script unknown', referer: https://pebi.tech/wp-login.php [Sat Feb 21 15:00:32.548681 2026] [proxy_fcgi:error] [pid 1994661:tid 1994661] [client 37.77.150.124:0] AH01071: Got error 'Primary script unknown', referer: https://pebi.tech/xmlrpc.php [Sat Feb 21 15:00:40.540698 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:00:41.573585 2026] [security2:error] [pid 2029018:tid 2029018] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmCSOIr-8fgvpvBQQ3CvQAAAAM"] [Sat Feb 21 15:00:41.573659 2026] [security2:error] [pid 2029018:tid 2029018] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmCSOIr-8fgvpvBQQ3CvQAAAAM"] [Sat Feb 21 15:00:43.062704 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCSuIr-8fgvpvBQQ3CvgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:00:43.062782 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCSuIr-8fgvpvBQQ3CvgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:00:55.821557 2026] [access_compat:error] [pid 2053371:tid 2053371] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:01:04.512878 2026] [security2:error] [pid 2053132:tid 2053132] [client 109.70.100.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmCXnzIHFng0nDt3VFwiwAAAAU"], referer: https://arcticairandrefrigeration.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Farcticairandrefrigeration.com%2F [Sat Feb 21 15:01:04.512961 2026] [security2:error] [pid 2053132:tid 2053132] [client 109.70.100.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmCXnzIHFng0nDt3VFwiwAAAAU"], referer: https://arcticairandrefrigeration.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Farcticairandrefrigeration.com%2F [Sat Feb 21 15:01:07.877612 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCYw6zZrsiEKn4Yr9TlQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:01:07.877715 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCYw6zZrsiEKn4Yr9TlQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:01:11.544729 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCZ02JgS98vN9XlLXFrQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:01:11.544827 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmCZ02JgS98vN9XlLXFrQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:01:37.885171 2026] [security2:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "new.noorroknasateer.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmCgS_6Hqts6s-LNdAuOAAAAAk"] [Sat Feb 21 15:01:37.885254 2026] [security2:error] [pid 2012011:tid 2012011] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "new.noorroknasateer.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmCgS_6Hqts6s-LNdAuOAAAAAk"] [Sat Feb 21 15:01:49.840012 2026] [security2:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-global": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZmCjC9RbKAccNLF-QE4QQAAAAc"] [Sat Feb 21 15:01:49.840081 2026] [security2:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-ip": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZmCjC9RbKAccNLF-QE4QQAAAAc"] [Sat Feb 21 15:01:51.372322 2026] [security2:error] [pid 2029018:tid 2029018] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "mail.5starapptex.com"] [uri "/index.php"] [unique_id "aZmCjuIr-8fgvpvBQQ3C5wAAAAM"] [Sat Feb 21 15:01:51.372384 2026] [security2:error] [pid 2029018:tid 2029018] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "mail.5starapptex.com"] [uri "/index.php"] [unique_id "aZmCjuIr-8fgvpvBQQ3C5wAAAAM"] [Sat Feb 21 15:01:57.489143 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:02:07.389617 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/error_log [Sat Feb 21 15:02:16.455268 2026] [security2:error] [pid 2039657:tid 2039657] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/cbrfo.php"] [unique_id "aZmCqC9RbKAccNLF-QE4VgAAAAc"] [Sat Feb 21 15:02:16.455359 2026] [security2:error] [pid 2039657:tid 2039657] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/cbrfo.php"] [unique_id "aZmCqC9RbKAccNLF-QE4VgAAAAc"] [Sat Feb 21 15:02:24.183472 2026] [authz_core:error] [pid 2053132:tid 2053132] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/SimplePie/error_log [Sat Feb 21 15:02:30.901806 2026] [security2:error] [pid 2029018:tid 2029018] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "mail.5starapptex.com"] [uri "/domains.php"] [unique_id "aZmCtuIr-8fgvpvBQQ3DAQAAAAM"] [Sat Feb 21 15:02:30.901865 2026] [security2:error] [pid 2029018:tid 2029018] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "mail.5starapptex.com"] [uri "/domains.php"] [unique_id "aZmCtuIr-8fgvpvBQQ3DAQAAAAM"] [Sat Feb 21 15:02:31.743263 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/Requests/error_log [Sat Feb 21 15:02:42.238078 2026] [security2:error] [pid 2053683:tid 2053683] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-global": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmCwE2JgS98vN9XlLXF4QAAAAw"], referer: https://DES-PVT.COM/wp-login.php [Sat Feb 21 15:02:42.238139 2026] [security2:error] [pid 2053683:tid 2053683] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-ip": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmCwE2JgS98vN9XlLXF4QAAAAw"], referer: https://DES-PVT.COM/wp-login.php [Sat Feb 21 15:02:50.225101 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/block-supports/error_log [Sat Feb 21 15:02:55.360673 2026] [security2:error] [pid 2049075:tid 2049075] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-global": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmCzcrssm78_TCE3WXFYwAAAAI"], referer: https://DES-PVT.COM/wp-login.php [Sat Feb 21 15:02:55.360777 2026] [security2:error] [pid 2049075:tid 2049075] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-ip": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmCzcrssm78_TCE3WXFYwAAAAI"], referer: https://DES-PVT.COM/wp-login.php [Sat Feb 21 15:03:03.208084 2026] [cgi:error] [pid 2048946:tid 2048946] [client 40.80.90.214:0] AH02812: stderr from /home/roknasateer/public_html/new/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:03:07.255806 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/sitemaps/providers/error_log [Sat Feb 21 15:03:07.981877 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/block-patterns/error_log [Sat Feb 21 15:03:10.002366 2026] [cgi:error] [pid 2049818:tid 2049818] [client 20.219.8.79:0] AH02812: stderr from /home/despvt/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:03:16.984741 2026] [security2:error] [pid 2053683:tid 2053683] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmC5E2JgS98vN9XlLXF9wAAAAw"] [Sat Feb 21 15:03:16.984844 2026] [security2:error] [pid 2053683:tid 2053683] [client 40.80.90.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.new.noorroknasateer.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmC5E2JgS98vN9XlLXF9wAAAAw"] [Sat Feb 21 15:03:17.193681 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmC5S_6Hqts6s-LNdAugQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:03:17.193783 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmC5S_6Hqts6s-LNdAugQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:03:20.997198 2026] [authz_core:error] [pid 2055042:tid 2055042] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/wpcf7_uploads/ [Sat Feb 21 15:03:21.006505 2026] [access_compat:error] [pid 2055042:tid 2055042] [client 20.219.8.79:0] AH01797: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 15:03:25.559548 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:03:32.440246 2026] [authz_core:error] [pid 2049818:tid 2049818] [client 20.219.8.79:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/html-api/error_log [Sat Feb 21 15:03:37.320373 2026] [security2:error] [pid 2053683:tid 2053683] [client 141.98.11.171:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.env"] [unique_id "aZmC-U2JgS98vN9XlLXGCwAAAAw"] [Sat Feb 21 15:03:57.035002 2026] [security2:error] [pid 1994661:tid 1994661] [client 40.77.167.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmDDIhPsHRVAc81jVCYJAAAAAY"] [Sat Feb 21 15:03:57.035087 2026] [security2:error] [pid 1994661:tid 1994661] [client 40.77.167.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmDDIhPsHRVAc81jVCYJAAAAAY"] [Sat Feb 21 15:03:58.135723 2026] [security2:error] [pid 2049818:tid 2049818] [client 20.46.124.66:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo2.247reactionpower.com"] [uri "/ff1.php"] [unique_id "aZmDDizqxU5GGBTajpHd3gAAAAE"] [Sat Feb 21 15:03:58.135802 2026] [security2:error] [pid 2049818:tid 2049818] [client 20.46.124.66:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo2.247reactionpower.com"] [uri "/ff1.php"] [unique_id "aZmDDizqxU5GGBTajpHd3gAAAAE"] [Sat Feb 21 15:04:13.700922 2026] [security2:error] [pid 2053683:tid 2053683] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-global": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmDHE2JgS98vN9XlLXGJgAAAAw"], referer: https://DES-PVT.COM/wp-login.php [Sat Feb 21 15:04:13.700997 2026] [security2:error] [pid 2053683:tid 2053683] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-ip": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmDHE2JgS98vN9XlLXGJgAAAAw"], referer: https://DES-PVT.COM/wp-login.php [Sat Feb 21 15:04:38.803406 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:05:04.509011 2026] [security2:error] [pid 2053683:tid 2053683] [client 66.249.79.202:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZmDUE2JgS98vN9XlLXGUwAAAAw"] [Sat Feb 21 15:05:04.509086 2026] [security2:error] [pid 2053683:tid 2053683] [client 66.249.79.202:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZmDUE2JgS98vN9XlLXGUwAAAAw"] [Sat Feb 21 15:05:09.906143 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:05:24.455897 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmDZHzIHFng0nDt3VFxQwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 15:05:24.456002 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmDZHzIHFng0nDt3VFxQwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 15:06:03.820859 2026] [cgi:error] [pid 2049075:tid 2049075] [client 68.221.64.54:0] AH02812: stderr from /home/novaapparelcom/public_html/site.nova-apparel.com.pk/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:06:16.883901 2026] [autoindex:error] [pid 2029018:tid 2029018] [client 68.221.64.54:0] AH01276: Cannot serve directory /home/novaapparelcom/public_html/site.nova-apparel.com.pk/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:06:19.988842 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmDm02JgS98vN9XlLXGfQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:06:19.988903 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmDm02JgS98vN9XlLXGfQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:06:21.214125 2026] [security2:error] [pid 2055042:tid 2055042] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmDnSV4d9bo-ONIcYNCDgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3 [Sat Feb 21 15:06:21.214413 2026] [security2:error] [pid 2055042:tid 2055042] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmDnSV4d9bo-ONIcYNCDgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3 [Sat Feb 21 15:06:24.478628 2026] [security2:error] [pid 2049075:tid 2049075] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "curvedconnections.com"] [uri "/api/.env"] [unique_id "aZmDoMrssm78_TCE3WXF7wAAAAI"] [Sat Feb 21 15:06:27.329905 2026] [security2:error] [pid 2048946:tid 2048946] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "curvedconnections.com"] [uri "/.env"] [unique_id "aZmDow6zZrsiEKn4Yr9UYAAAAAA"] [Sat Feb 21 15:06:28.312094 2026] [security2:error] [pid 2039657:tid 2039657] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "curvedconnections.com"] [uri "/.git/config"] [unique_id "aZmDpC9RbKAccNLF-QE5DAAAAAc"] [Sat Feb 21 15:06:30.768280 2026] [autoindex:error] [pid 2055042:tid 2055042] [client 68.221.64.54:0] AH01276: Cannot serve directory /home/novaapparelcom/public_html/site.nova-apparel.com.pk/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:06:30.785858 2026] [access_compat:error] [pid 2049818:tid 2049818] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:06:32.053033 2026] [autoindex:error] [pid 2029018:tid 2029018] [client 68.221.64.54:0] AH01276: Cannot serve directory /home/novaapparelcom/public_html/site.nova-apparel.com.pk/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:06:33.242016 2026] [autoindex:error] [pid 2049075:tid 2049075] [client 68.221.64.54:0] AH01276: Cannot serve directory /home/novaapparelcom/public_html/site.nova-apparel.com.pk/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:06:52.969203 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:07:14.091365 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmD0k2JgS98vN9XlLXGmwAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:07:14.091428 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmD0k2JgS98vN9XlLXGmwAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:07:17.809502 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmD1S9RbKAccNLF-QE5KQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:07:17.809629 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmD1S9RbKAccNLF-QE5KQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:07:31.225780 2026] [autoindex:error] [pid 2012011:tid 2012011] [client 68.221.64.54:0] AH01276: Cannot serve directory /home/novaapparelcom/public_html/site.nova-apparel.com.pk/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:07:43.443149 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmD7y_6Hqts6s-LNdAvNwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:07:43.443242 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmD7y_6Hqts6s-LNdAvNwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:07:54.818192 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:08:07.056760 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:08:08.237132 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmECCzqxU5GGBTajpHedwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:08:08.237252 2026] [security2:error] [pid 2049818:tid 2049818] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmECCzqxU5GGBTajpHedwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:08:17.068727 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:08:48.729268 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEMFQdZ64h20JcCSo_9wAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:08:48.729393 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEMFQdZ64h20JcCSo_9wAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:08:52.567037 2026] [security2:error] [pid 2012077:tid 2012077] [client 40.77.167.156:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'so1)o' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: so1)o found within ARGS:e: E'F,'-tougen-anki-E*1,E)-HB*-'DE'F,'-zz-nMarnyu8"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZmENFQdZ64h20JcCSo_-QAAAAs"] [Sat Feb 21 15:09:02.735978 2026] [security2:error] [pid 2049075:tid 2049075] [client 52.167.144.166:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'so1)o' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: so1)o found within ARGS:e: E'F,'-tougen-anki-E*1,E)-HB*-'DE'F,'-zz-nMarnyu8"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZmEPsrssm78_TCE3WXGSAAAAAI"] [Sat Feb 21 15:09:04.530695 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:09:06.015977 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEQS9RbKAccNLF-QE5ZwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:09:06.016070 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEQS9RbKAccNLF-QE5ZwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:09:11.008492 2026] [security2:error] [pid 2049075:tid 2049075] [client 157.55.39.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmERcrssm78_TCE3WXGSgAAAAI"] [Sat Feb 21 15:09:11.008573 2026] [security2:error] [pid 2049075:tid 2049075] [client 157.55.39.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmERcrssm78_TCE3WXGSgAAAAI"] [Sat Feb 21 15:09:14.514524 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmESnzIHFng0nDt3VFxtQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:09:14.514618 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmESnzIHFng0nDt3VFxtQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:09:33.500830 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEXQ6zZrsiEKn4Yr9UxQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:09:33.500945 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEXQ6zZrsiEKn4Yr9UxQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:09:37.354277 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/asalinnovations/public_html/wp-content/uploads/astra-sites/, referer: binance.com [Sat Feb 21 15:09:39.431122 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEY0sPNwlk_ki2D0hm1gAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop5%2Fmq%2F0%2Fcpu1 [Sat Feb 21 15:09:39.431219 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEY0sPNwlk_ki2D0hm1gAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop5%2Fmq%2F0%2Fcpu1 [Sat Feb 21 15:09:52.991572 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEcMrssm78_TCE3WXGXgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 15:09:52.991684 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEcMrssm78_TCE3WXGXgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop1%2Fsubsystem%2Floop3%2Fsubsystem%2Fsda%2Fmq%2F0 [Sat Feb 21 15:10:05.458871 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEfVQdZ64h20JcCSpAHAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:10:05.458983 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEfVQdZ64h20JcCSpAHAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:10:09.692990 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEgUsPNwlk_ki2D0hm4QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi [Sat Feb 21 15:10:09.693106 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEgUsPNwlk_ki2D0hm4QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi [Sat Feb 21 15:10:45.081248 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 104.46.239.31:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/customize/error_log [Sat Feb 21 15:10:48.382251 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:11:00.949918 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEtHzIHFng0nDt3VFx5wAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:11:00.949998 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEtHzIHFng0nDt3VFx5wAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:11:02.029343 2026] [core:error] [pid 2058141:tid 2058141] [client 98.84.1.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:11:02.029445 2026] [core:error] [pid 2058141:tid 2058141] [client 98.84.1.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:11:26.868692 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEzuIr-8fgvpvBQQ3EOwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 15:11:26.868806 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmEzuIr-8fgvpvBQQ3EOwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 15:11:34.065558 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmE1XzIHFng0nDt3VFx9wAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:11:34.065627 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmE1XzIHFng0nDt3VFx9wAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:11:42.304997 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmE3rBoqed92ItjVUgDSwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:11:42.305081 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmE3rBoqed92ItjVUgDSwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:12:06.662814 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:12:09.908137 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmE-bBoqed92ItjVUgDWgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:12:09.908273 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmE-bBoqed92ItjVUgDWgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:12:17.511096 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 104.46.239.31:0] AH01797: client denied by server configuration: /home/surf/public_html/wp-content/uploads/wc-logs/ [Sat Feb 21 15:12:17.518635 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 104.46.239.31:0] AH01797: client denied by server configuration: /home/surf/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 15:13:00.675790 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFLC_6Hqts6s-LNdAvxQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:13:00.675973 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFLC_6Hqts6s-LNdAvxQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:13:12.079306 2026] [security2:error] [pid 2049075:tid 2049075] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmFN8rssm78_TCE3WXGxQAAAAI"] [Sat Feb 21 15:13:12.079399 2026] [security2:error] [pid 2049075:tid 2049075] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmFN8rssm78_TCE3WXGxQAAAAI"] [Sat Feb 21 15:13:17.588805 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFPeIr-8fgvpvBQQ3EdwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:13:17.588866 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFPeIr-8fgvpvBQQ3EdwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:13:19.387922 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:13:24.719894 2026] [security2:error] [pid 2053683:tid 2053683] [client 52.167.144.16:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmFRE2JgS98vN9XlLXHVgAAAAw"] [Sat Feb 21 15:13:24.719970 2026] [security2:error] [pid 2053683:tid 2053683] [client 52.167.144.16:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmFRE2JgS98vN9XlLXHVgAAAAw"] [Sat Feb 21 15:13:29.734801 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFSU2JgS98vN9XlLXHWQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:13:29.734887 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFSU2JgS98vN9XlLXHWQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:13:40.966955 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 104.46.239.31:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/block-patterns/error_log [Sat Feb 21 15:13:42.923329 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFVsrssm78_TCE3WXG1QAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:13:42.923417 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFVsrssm78_TCE3WXG1QAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:14:15.757335 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com [Sat Feb 21 15:14:15.765025 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 212.227.100.3:0] AH01797: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 15:14:29.245589 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 15:14:33.949474 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-admin/maint/error_log, referer: binance.com [Sat Feb 21 15:14:34.418750 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFilQdZ64h20JcCSpAoQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 15:14:34.418867 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFilQdZ64h20JcCSpAoQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 15:14:38.769940 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:15:29.016270 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFwMrssm78_TCE3WXHBwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:15:29.016392 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmFwMrssm78_TCE3WXHBwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:15:34.382902 2026] [security2:error] [pid 2039657:tid 2039657] [client 212.227.100.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-global": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmFxC9RbKAccNLF-QE6KAAAAAc"], referer: binance.com [Sat Feb 21 15:15:34.382995 2026] [security2:error] [pid 2039657:tid 2039657] [client 212.227.100.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/despvt-ip": Permission denied [hostname "des-pvt.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmFxC9RbKAccNLF-QE6KAAAAAc"], referer: binance.com [Sat Feb 21 15:15:44.991192 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 15:15:47.369782 2026] [security2:error] [pid 2049075:tid 2049075] [client 35.231.122.100:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmF08rssm78_TCE3WXHEQAAAAI"] [Sat Feb 21 15:15:47.369887 2026] [security2:error] [pid 2049075:tid 2049075] [client 35.231.122.100:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmF08rssm78_TCE3WXHEQAAAAI"] [Sat Feb 21 15:16:01.245597 2026] [authz_core:error] [pid 2058141:tid 2058141] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/asalinnovations/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 15:16:31.770748 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:16:52.627999 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGFMrssm78_TCE3WXHNAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:16:52.628108 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGFMrssm78_TCE3WXHNAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:17:34.762518 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGPrBoqed92ItjVUgEAgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 15:17:34.762599 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGPrBoqed92ItjVUgEAgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 15:17:46.646785 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGSnzIHFng0nDt3VFyrgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:17:46.646912 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGSnzIHFng0nDt3VFyrgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:18:20.065289 2026] [security2:error] [pid 2058141:tid 2058141] [client 43.173.178.131:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-global": Permission denied [hostname "akcpa.sa"] [uri "/"] [unique_id "aZmGbLBoqed92ItjVUgEFAAAAAg"] [Sat Feb 21 15:18:20.065364 2026] [security2:error] [pid 2058141:tid 2058141] [client 43.173.178.131:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-ip": Permission denied [hostname "akcpa.sa"] [uri "/"] [unique_id "aZmGbLBoqed92ItjVUgEFAAAAAg"] [Sat Feb 21 15:18:23.083207 2026] [authz_core:error] [pid 2049075:tid 2049075] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 15:18:25.458581 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGcU2JgS98vN9XlLXH7gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:18:25.458661 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGcU2JgS98vN9XlLXH7gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:18:30.406577 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 15:18:38.043585 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 15:19:01.267831 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGlS9RbKAccNLF-QE6kgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:19:01.267956 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGlS9RbKAccNLF-QE6kgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:19:11.576399 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:19:13.943788 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGoS_6Hqts6s-LNdAwggAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:19:13.943880 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmGoS_6Hqts6s-LNdAwggAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:19:33.595486 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 15:19:39.315815 2026] [authz_core:error] [pid 2012011:tid 2012011] [client 212.227.100.3:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 15:20:13.205924 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmG3UsPNwlk_ki2D0hoCwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:20:13.205995 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmG3UsPNwlk_ki2D0hoCwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:20:13.719431 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmG3bBoqed92ItjVUgEVAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:20:13.719547 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmG3bBoqed92ItjVUgEVAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:20:15.366773 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmG31QdZ64h20JcCSpBUwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:20:15.366918 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmG31QdZ64h20JcCSpBUwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:20:36.507431 2026] [security2:error] [pid 2053132:tid 2053132] [client 178.16.52.3:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "3mlittmann.us"] [uri "/.env"] [unique_id "aZmG9HzIHFng0nDt3VFzCQAAAAU"] [Sat Feb 21 15:20:55.430569 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:20:58.403582 2026] [security2:error] [pid 2053683:tid 2053683] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/.env"] [unique_id "aZmHCk2JgS98vN9XlLXIOgAAAAw"] [Sat Feb 21 15:20:58.422822 2026] [security2:error] [pid 2029018:tid 2029018] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/.env.bak"] [unique_id "aZmHCuIr-8fgvpvBQQ3FVAAAAAM"] [Sat Feb 21 15:20:58.463597 2026] [security2:error] [pid 2049075:tid 2049075] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/.env.save"] [unique_id "aZmHCsrssm78_TCE3WXHrAAAAAI"] [Sat Feb 21 15:20:58.482053 2026] [security2:error] [pid 2053132:tid 2053132] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/.env.backup"] [unique_id "aZmHCnzIHFng0nDt3VFzEgAAAAU"] [Sat Feb 21 15:20:58.502753 2026] [security2:error] [pid 2058141:tid 2058141] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/backend/.env"] [unique_id "aZmHCrBoqed92ItjVUgEaQAAAAg"] [Sat Feb 21 15:20:58.524393 2026] [security2:error] [pid 2012077:tid 2012077] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/admin/.env"] [unique_id "aZmHClQdZ64h20JcCSpBZwAAAAs"] [Sat Feb 21 15:20:58.549415 2026] [security2:error] [pid 2058769:tid 2058769] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/.git/config"] [unique_id "aZmHCksPNwlk_ki2D0hoIAAAAAY"] [Sat Feb 21 15:20:58.571800 2026] [security2:error] [pid 2012011:tid 2012011] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/wp-config.php"] [unique_id "aZmHCi_6Hqts6s-LNdAwugAAAAk"] [Sat Feb 21 15:20:58.577482 2026] [proxy_fcgi:error] [pid 2012011:tid 2012011] [client 93.123.109.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:20:58.800865 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 93.123.109.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:20:58.818987 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 93.123.109.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:20:58.839079 2026] [proxy_fcgi:error] [pid 2058769:tid 2058769] [client 93.123.109.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:20:59.001419 2026] [security2:error] [pid 2048946:tid 2048946] [client 93.123.109.214:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.brightway.com.pk"] [uri "/.git/HEAD"] [unique_id "aZmHCg6zZrsiEKn4Yr9WEgAAAAA"] [Sat Feb 21 15:20:59.990835 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHCy9RbKAccNLF-QE6zwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:20:59.990923 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHCy9RbKAccNLF-QE6zwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:21:07.966853 2026] [security2:error] [pid 2012011:tid 2012011] [client 52.169.206.229:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/wp-update.php"] [unique_id "aZmHEy_6Hqts6s-LNdAwyQAAAAk"] [Sat Feb 21 15:21:07.966960 2026] [security2:error] [pid 2012011:tid 2012011] [client 52.169.206.229:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/wp-update.php"] [unique_id "aZmHEy_6Hqts6s-LNdAwyQAAAAk"] [Sat Feb 21 15:21:17.920699 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHHQ6zZrsiEKn4Yr9WLAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:21:17.920808 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHHQ6zZrsiEKn4Yr9WLAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:21:38.402925 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHMrBoqed92ItjVUgEjQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:21:38.403028 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHMrBoqed92ItjVUgEjQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:21:40.739318 2026] [security2:error] [pid 2058141:tid 2058141] [client 180.153.236.107:0] ModSecurity: Warning. Matched phrase "user-agent:" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "33"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: user-agent: found within REQUEST_HEADERS:User-Agent: user-agent:mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/140.0.0.0 safari/537.36 edg/140.0.0.0; 360spider"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.spotliteworld.com"] [uri "/"] [unique_id "aZmHNLBoqed92ItjVUgEjgAAAAg"], referer: http://www.spotliteworld.com/ [Sat Feb 21 15:21:43.173110 2026] [security2:error] [pid 2058141:tid 2058141] [client 180.153.236.107:0] ModSecurity: collection_store: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-ip": Permission denied [hostname "www.spotliteworld.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmHNLBoqed92ItjVUgEjgAAAAg"], referer: http://www.spotliteworld.com/ [Sat Feb 21 15:22:38.650404 2026] [access_compat:error] [pid 2012011:tid 2012011] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:23:28.409302 2026] [security2:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmHn0sPNwlk_ki2D0hodQAAAAY"] [Sat Feb 21 15:23:28.409456 2026] [security2:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmHn0sPNwlk_ki2D0hodQAAAAY"] [Sat Feb 21 15:23:38.125880 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHquIr-8fgvpvBQQ3FsQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:23:38.125962 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHquIr-8fgvpvBQQ3FsQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:23:38.816535 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:23:43.932504 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHr0sPNwlk_ki2D0hofQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:23:43.932579 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHr0sPNwlk_ki2D0hofQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:23:47.880856 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmHsi_6Hqts6s-LNdAxFgAAAAk"] [Sat Feb 21 15:23:47.880938 2026] [security2:error] [pid 2012011:tid 2012011] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmHsi_6Hqts6s-LNdAxFgAAAAk"] [Sat Feb 21 15:23:52.294157 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHuOIr-8fgvpvBQQ3FtwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:23:52.294263 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmHuOIr-8fgvpvBQQ3FtwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:23:56.773172 2026] [security2:error] [pid 2039657:tid 2039657] [client 52.167.144.220:0] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: on-x-!:0G0BL-\\x1c09=:@0DB-minecraft-<09=:@0DB-x-zz-3n0akwum found within ARGS:e: on-x-!:0G0BL-\\x1c09=:@0DB-minecraft-<09=:@0DB-x-zz-3n0akwum"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZmHvC9RbKAccNLF-QE7MwAAAAc"] [Sat Feb 21 15:24:03.975564 2026] [security2:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmHwksPNwlk_ki2D0hohwAAAAY"] [Sat Feb 21 15:24:03.975650 2026] [security2:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmHwksPNwlk_ki2D0hohwAAAAY"] [Sat Feb 21 15:24:22.261153 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.243.223:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-includes/css/dist/block-library/style.min.css"] [unique_id "aZmH1ksPNwlk_ki2D0hokQAAAAY"], referer: https://asalinnovations.com/ [Sat Feb 21 15:24:22.261293 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.243.223:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-includes/css/dist/block-library/style.min.css"] [unique_id "aZmH1ksPNwlk_ki2D0hokQAAAAY"], referer: https://asalinnovations.com/ [Sat Feb 21 15:24:28.615886 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmH3E2JgS98vN9XlLXIsAAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:24:28.615957 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmH3E2JgS98vN9XlLXIsAAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:24:30.990502 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.243.223:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js"] [unique_id "aZmH3srssm78_TCE3WXIIgAAAAI"], referer: https://asalinnovations.com/ [Sat Feb 21 15:24:30.990574 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.243.223:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js"] [unique_id "aZmH3srssm78_TCE3WXIIgAAAAI"], referer: https://asalinnovations.com/ [Sat Feb 21 15:24:32.558293 2026] [security2:error] [pid 2039657:tid 2039657] [client 180.153.236.154:0] ModSecurity: Warning. Matched phrase "user-agent:" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "33"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: user-agent: found within REQUEST_HEADERS:User-Agent: user-agent:mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/140.0.0.0 safari/537.36 edg/140.0.0.0; 360spider"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.mukyasenergy.com"] [uri "/"] [unique_id "aZmH4C9RbKAccNLF-QE7SQAAAAc"], referer: http://www.mukyasenergy.com/ [Sat Feb 21 15:24:33.563364 2026] [security2:error] [pid 2039657:tid 2039657] [client 180.153.236.154:0] ModSecurity: collection_store: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "www.mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmH4C9RbKAccNLF-QE7SQAAAAc"], referer: http://www.mukyasenergy.com/ [Sat Feb 21 15:24:37.586535 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmH5UsPNwlk_ki2D0honAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:24:37.586624 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmH5UsPNwlk_ki2D0honAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:24:37.890587 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.243.223:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/convertkit/resources/frontend/js/convertkit.js"] [unique_id "aZmH5XzIHFng0nDt3VFzjAAAAAU"], referer: https://asalinnovations.com/ [Sat Feb 21 15:24:37.890684 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.243.223:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/convertkit/resources/frontend/js/convertkit.js"] [unique_id "aZmH5XzIHFng0nDt3VFzjAAAAAU"], referer: https://asalinnovations.com/ [Sat Feb 21 15:24:52.000467 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmH87Boqed92ItjVUgE7AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:24:52.000549 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmH87Boqed92ItjVUgE7AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:24:53.506569 2026] [autoindex:error] [pid 2012011:tid 2012011] [client 84.247.188.147:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sat Feb 21 15:25:08.485549 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIBC9RbKAccNLF-QE7XQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:25:08.485606 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIBC9RbKAccNLF-QE7XQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:25:11.192986 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:25:11.825091 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:25:12.148124 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmICC_6Hqts6s-LNdAxRwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 15:25:12.148214 2026] [security2:error] [pid 2012011:tid 2012011] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmICC_6Hqts6s-LNdAxRwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 15:25:26.497117 2026] [security2:error] [pid 2053132:tid 2053132] [client 158.94.208.149:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/dist/main.js"] [unique_id "aZmIFnzIHFng0nDt3VFzqAAAAAU"] [Sat Feb 21 15:25:26.497192 2026] [security2:error] [pid 2053132:tid 2053132] [client 158.94.208.149:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/dist/main.js"] [unique_id "aZmIFnzIHFng0nDt3VFzqAAAAAU"] [Sat Feb 21 15:25:53.551938 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 43.130.31.17:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 15:25:53.552359 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 43.130.31.17:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 15:25:53.556033 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 43.130.31.17:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 15:25:57.417282 2026] [cgi:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH02812: stderr from /home/mukyasenergy/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:25:58.436092 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmINg6zZrsiEKn4Yr9WswAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:25:58.436159 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmINg6zZrsiEKn4Yr9WswAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:26:13.043001 2026] [autoindex:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:26:19.680041 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 45.61.184.157:0] AH01071: Got error 'Primary script unknown', referer: http://www.google.com.hk [Sat Feb 21 15:26:23.782561 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:26:23.881174 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:26:26.529392 2026] [autoindex:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:26:27.633088 2026] [autoindex:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:26:29.196583 2026] [autoindex:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:26:35.247934 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:26:35.919981 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIW8rssm78_TCE3WXIYwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:26:35.920039 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIW8rssm78_TCE3WXIYwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:26:48.866582 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIaHzIHFng0nDt3VFzzAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:26:48.866741 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIaHzIHFng0nDt3VFzzAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:27:01.622883 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIdU2JgS98vN9XlLXJAQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:27:01.622958 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIdU2JgS98vN9XlLXJAQAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:27:41.200648 2026] [autoindex:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:28:21.337670 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIxUsPNwlk_ki2D0hpDQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:28:21.337852 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmIxUsPNwlk_ki2D0hpDQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:28:47.058941 2026] [core:error] [pid 2029018:tid 2029018] [client 107.21.11.47:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:28:47.059041 2026] [core:error] [pid 2029018:tid 2029018] [client 107.21.11.47:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:29:08.641451 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmI9FQdZ64h20JcCSpCYAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:29:08.641534 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmI9FQdZ64h20JcCSpCYAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:29:12.888662 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmI-FQdZ64h20JcCSpCYgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:29:12.888853 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmI-FQdZ64h20JcCSpCYgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:29:13.343844 2026] [security2:error] [pid 2039657:tid 2039657] [client 5.39.109.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-global": Permission denied [hostname "www.curvedconnections.com"] [uri "/500.shtml"] [unique_id "aZmI-S9RbKAccNLF-QE7zwAAAAc"] [Sat Feb 21 15:29:13.343917 2026] [security2:error] [pid 2039657:tid 2039657] [client 5.39.109.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-ip": Permission denied [hostname "www.curvedconnections.com"] [uri "/500.shtml"] [unique_id "aZmI-S9RbKAccNLF-QE7zwAAAAc"] [Sat Feb 21 15:29:13.688838 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmI-crssm78_TCE3WXIqAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:29:13.688939 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmI-crssm78_TCE3WXIqAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:29:17.455368 2026] [authz_core:error] [pid 2039657:tid 2039657] [client 161.97.90.16:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 15:29:41.768964 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJFQ6zZrsiEKn4Yr9XFQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:29:41.769038 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJFQ6zZrsiEKn4Yr9XFQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:30:09.446558 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJMVQdZ64h20JcCSpCfQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:30:09.446677 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJMVQdZ64h20JcCSpCfQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:30:09.860392 2026] [autoindex:error] [pid 2029018:tid 2029018] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:24.712491 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJQMrssm78_TCE3WXIzAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:30:24.712588 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJQMrssm78_TCE3WXIzAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:30:38.018180 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:30:38.302875 2026] [autoindex:error] [pid 2053683:tid 2053683] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:39.827777 2026] [autoindex:error] [pid 2058141:tid 2058141] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:42.343481 2026] [security2:error] [pid 2012077:tid 2012077] [client 4.193.177.110:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmJUVQdZ64h20JcCSpCjgAAAAs"] [Sat Feb 21 15:30:42.343595 2026] [security2:error] [pid 2012077:tid 2012077] [client 4.193.177.110:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmJUVQdZ64h20JcCSpCjgAAAAs"] [Sat Feb 21 15:30:44.085955 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:45.653253 2026] [autoindex:error] [pid 2048946:tid 2048946] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:48.673844 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJWEsPNwlk_ki2D0hpUAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:30:48.673904 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJWEsPNwlk_ki2D0hpUAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:30:48.838122 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:50.482764 2026] [autoindex:error] [pid 2058141:tid 2058141] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:30:56.558720 2026] [autoindex:error] [pid 2053132:tid 2053132] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:00.960867 2026] [autoindex:error] [pid 2012077:tid 2012077] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:05.683854 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:09.007882 2026] [autoindex:error] [pid 2058141:tid 2058141] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:15.244055 2026] [autoindex:error] [pid 2067416:tid 2067416] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:16.816514 2026] [autoindex:error] [pid 2048946:tid 2048946] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:18.282486 2026] [autoindex:error] [pid 2049075:tid 2049075] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:27.628112 2026] [autoindex:error] [pid 2058769:tid 2058769] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:29.080736 2026] [autoindex:error] [pid 2048946:tid 2048946] [client 4.193.177.110:0] AH01276: Cannot serve directory /home/mukyasenergy/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 15:31:29.333734 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJgXzIHFng0nDt3VF0VAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fpower [Sat Feb 21 15:31:29.333809 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJgXzIHFng0nDt3VF0VAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fpower [Sat Feb 21 15:32:14.894594 2026] [authz_core:error] [pid 2058141:tid 2058141] [client 161.97.90.16:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 15:32:21.312058 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJtQ6zZrsiEKn4Yr9XXgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:32:21.312122 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJtQ6zZrsiEKn4Yr9XXgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:32:25.408880 2026] [security2:error] [pid 2053132:tid 2053132] [client 52.167.144.138:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's1nc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s1nc found within ARGS:e: A\\x0a!\\x1e9*!8\\x19D\\x1e#-4yl-thailand-\\x175H-\\x229H-84-5-+\\x19-\\x07\\x1bH2\\x04#1H\\x07-50000-zz-QX5m0Nu0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZmJuXzIHFng0nDt3VF0bwAAAAU"] [Sat Feb 21 15:32:26.168186 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:32:27.084901 2026] [security2:error] [pid 2067416:tid 2067416] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJurBbeII3pzVVBGhjKgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:32:27.084989 2026] [security2:error] [pid 2067416:tid 2067416] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJurBbeII3pzVVBGhjKgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:32:35.355188 2026] [security2:error] [pid 2039657:tid 2039657] [client 52.167.144.24:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's1nc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s1nc found within ARGS:e: A\\x0a!\\x1e9*!8\\x19D\\x1e#-4yl-thailand-\\x175H-\\x229H-84-5-+\\x19-\\x07\\x1bH2\\x04#1H\\x07-50000-zz-QX5m0Nu0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZmJwy9RbKAccNLF-QE8MQAAAAc"] [Sat Feb 21 15:32:50.867935 2026] [security2:error] [pid 2049075:tid 2049075] [client 37.140.223.153:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmJ0srssm78_TCE3WXJFAAAAAI"] [Sat Feb 21 15:32:50.868024 2026] [security2:error] [pid 2049075:tid 2049075] [client 37.140.223.153:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmJ0srssm78_TCE3WXJFAAAAAI"] [Sat Feb 21 15:33:23.019913 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJ8nzIHFng0nDt3VF0iAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:33:23.020045 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmJ8nzIHFng0nDt3VF0iAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:33:34.701153 2026] [security2:error] [pid 2012077:tid 2012077] [client 178.16.52.3:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ahk.com.pk"] [uri "/.env"] [unique_id "aZmJ_lQdZ64h20JcCSpC3AAAAAs"] [Sat Feb 21 15:34:00.047768 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKF7Boqed92ItjVUgF7AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:34:00.047901 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKF7Boqed92ItjVUgF7AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:34:29.475179 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:34:58.381813 2026] [security2:error] [pid 2067416:tid 2067416] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKUrBbeII3pzVVBGhjbwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:34:58.381915 2026] [security2:error] [pid 2067416:tid 2067416] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKUrBbeII3pzVVBGhjbwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:35:38.073294 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKeU2JgS98vN9XlLXJ6QAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:35:38.073481 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKeU2JgS98vN9XlLXJ6QAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:35:38.147371 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:35:40.209664 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKfA6zZrsiEKn4Yr9XsgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:35:40.209734 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKfA6zZrsiEKn4Yr9XsgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:35:47.542452 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKgy9RbKAccNLF-QE8hQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:35:47.542549 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKgy9RbKAccNLF-QE8hQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:36:08.016982 2026] [security2:error] [pid 2053132:tid 2053132] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/autoload_classmap.php"] [unique_id "aZmKmHzIHFng0nDt3VF00gAAAAU"] [Sat Feb 21 15:36:08.017072 2026] [security2:error] [pid 2053132:tid 2053132] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/autoload_classmap.php"] [unique_id "aZmKmHzIHFng0nDt3VF00gAAAAU"] [Sat Feb 21 15:36:10.328608 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKmrBoqed92ItjVUgGJAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:36:10.328736 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKmrBoqed92ItjVUgGJAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:36:13.544212 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKnS9RbKAccNLF-QE8lAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:36:13.544327 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKnS9RbKAccNLF-QE8lAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:36:27.621474 2026] [security2:error] [pid 2067416:tid 2067416] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/shell20211028.php"] [unique_id "aZmKq7BbeII3pzVVBGhjoAAAAAE"] [Sat Feb 21 15:36:27.621567 2026] [security2:error] [pid 2067416:tid 2067416] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/shell20211028.php"] [unique_id "aZmKq7BbeII3pzVVBGhjoAAAAAE"] [Sat Feb 21 15:36:30.017522 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKrU2JgS98vN9XlLXKCAAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:36:30.017610 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKrU2JgS98vN9XlLXKCAAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:36:36.878150 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKtFQdZ64h20JcCSpDQAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:36:36.878216 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmKtFQdZ64h20JcCSpDQAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:36:48.034421 2026] [security2:error] [pid 2039657:tid 2039657] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/gebase.php"] [unique_id "aZmKwC9RbKAccNLF-QE8twAAAAc"] [Sat Feb 21 15:36:48.034501 2026] [security2:error] [pid 2039657:tid 2039657] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/gebase.php"] [unique_id "aZmKwC9RbKAccNLF-QE8twAAAAc"] [Sat Feb 21 15:37:02.920246 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aZmKzk2JgS98vN9XlLXKJgAAAAw"] [Sat Feb 21 15:37:02.920325 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aZmKzk2JgS98vN9XlLXKJgAAAAw"] [Sat Feb 21 15:37:11.504253 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK1-Ir-8fgvpvBQQ3HTgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:37:11.504348 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK1-Ir-8fgvpvBQQ3HTgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:37:12.908243 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZmK2E2JgS98vN9XlLXKMQAAAAw"] [Sat Feb 21 15:37:12.908325 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZmK2E2JgS98vN9XlLXKMQAAAAw"] [Sat Feb 21 15:37:14.912630 2026] [security2:error] [pid 2039657:tid 2039657] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmK2i9RbKAccNLF-QE81AAAAAc"] [Sat Feb 21 15:37:14.912696 2026] [security2:error] [pid 2039657:tid 2039657] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmK2i9RbKAccNLF-QE81AAAAAc"] [Sat Feb 21 15:37:20.821508 2026] [security2:error] [pid 2012077:tid 2012077] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aZmK4FQdZ64h20JcCSpDcwAAAAs"] [Sat Feb 21 15:37:20.821561 2026] [security2:error] [pid 2012077:tid 2012077] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aZmK4FQdZ64h20JcCSpDcwAAAAs"] [Sat Feb 21 15:37:22.699382 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK4ksPNwlk_ki2D0hqLQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:37:22.699502 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK4ksPNwlk_ki2D0hqLQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:37:33.685413 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK7S9RbKAccNLF-QE86AAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:37:33.685497 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK7S9RbKAccNLF-QE86AAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:37:42.071540 2026] [security2:error] [pid 2067416:tid 2067416] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK9bBbeII3pzVVBGhj8wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:37:42.071744 2026] [security2:error] [pid 2067416:tid 2067416] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmK9bBbeII3pzVVBGhj8wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:37:46.237185 2026] [security2:error] [pid 2072461:tid 2072461] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/.well-known/pki-validation/2index.php"] [unique_id "aZmK-q_eqbquRKin0NLxKwAAAAQ"] [Sat Feb 21 15:37:46.237273 2026] [security2:error] [pid 2072461:tid 2072461] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/.well-known/pki-validation/2index.php"] [unique_id "aZmK-q_eqbquRKin0NLxKwAAAAQ"] [Sat Feb 21 15:37:49.910207 2026] [security2:error] [pid 2067416:tid 2067416] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/seetox.php"] [unique_id "aZmK_bBbeII3pzVVBGhj-gAAAAE"] [Sat Feb 21 15:37:49.910319 2026] [security2:error] [pid 2067416:tid 2067416] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/seetox.php"] [unique_id "aZmK_bBbeII3pzVVBGhj-gAAAAE"] [Sat Feb 21 15:37:51.690808 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:37:52.393798 2026] [security2:error] [pid 2072461:tid 2072461] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/vx.php"] [unique_id "aZmLAK_eqbquRKin0NLxNQAAAAQ"] [Sat Feb 21 15:37:52.455916 2026] [security2:error] [pid 2072461:tid 2072461] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/vx.php"] [unique_id "aZmLAK_eqbquRKin0NLxNQAAAAQ"] [Sat Feb 21 15:37:52.789209 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.100.195.34:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/sm.php [Sat Feb 21 15:37:54.140240 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.100.195.34:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/sc.php [Sat Feb 21 15:37:56.992857 2026] [security2:error] [pid 2058769:tid 2058769] [client 20.219.166.250:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmLBEsPNwlk_ki2D0hqUwAAAAY"] [Sat Feb 21 15:37:56.992929 2026] [security2:error] [pid 2058769:tid 2058769] [client 20.219.166.250:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmLBEsPNwlk_ki2D0hqUwAAAAY"] [Sat Feb 21 15:37:59.994406 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLB7Boqed92ItjVUgGnAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:37:59.994494 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLB7Boqed92ItjVUgGnAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:38:03.159471 2026] [security2:error] [pid 2053683:tid 2053683] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/wp5.php"] [unique_id "aZmLC02JgS98vN9XlLXKYwAAAAw"] [Sat Feb 21 15:38:03.159548 2026] [security2:error] [pid 2053683:tid 2053683] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/wp5.php"] [unique_id "aZmLC02JgS98vN9XlLXKYwAAAAw"] [Sat Feb 21 15:38:03.276083 2026] [authz_core:error] [pid 2072461:tid 2072461] [client 161.97.90.16:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 15:38:05.421863 2026] [security2:error] [pid 2072461:tid 2072461] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/uploads/2022/bidlbdgp.php"] [unique_id "aZmLDa_eqbquRKin0NLxRQAAAAQ"] [Sat Feb 21 15:38:05.421963 2026] [security2:error] [pid 2072461:tid 2072461] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/uploads/2022/bidlbdgp.php"] [unique_id "aZmLDa_eqbquRKin0NLxRQAAAAQ"] [Sat Feb 21 15:38:13.514475 2026] [security2:error] [pid 2067416:tid 2067416] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZmLFbBbeII3pzVVBGhkGQAAAAE"] [Sat Feb 21 15:38:13.514639 2026] [security2:error] [pid 2067416:tid 2067416] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZmLFbBbeII3pzVVBGhkGQAAAAE"] [Sat Feb 21 15:38:14.595411 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLFi9RbKAccNLF-QE9GgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:38:14.595473 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLFi9RbKAccNLF-QE9GgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:38:16.177933 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 161.97.90.16:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 15:38:19.860219 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLG0sPNwlk_ki2D0hqcgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:38:19.860308 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLG0sPNwlk_ki2D0hqcgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:38:22.410043 2026] [security2:error] [pid 2072461:tid 2072461] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/ovatools.php"] [unique_id "aZmLHq_eqbquRKin0NLxWgAAAAQ"] [Sat Feb 21 15:38:22.410124 2026] [security2:error] [pid 2072461:tid 2072461] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/ovatools.php"] [unique_id "aZmLHq_eqbquRKin0NLxWgAAAAQ"] [Sat Feb 21 15:38:34.269095 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZmLKlQdZ64h20JcCSpDzQAAAAs"] [Sat Feb 21 15:38:34.269197 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.163.110.166:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZmLKlQdZ64h20JcCSpDzQAAAAs"] [Sat Feb 21 15:38:38.212806 2026] [security2:error] [pid 2029018:tid 2029018] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/wp-configs.php"] [unique_id "aZmLLuIr-8fgvpvBQQ3HvQAAAAM"] [Sat Feb 21 15:38:38.212874 2026] [security2:error] [pid 2029018:tid 2029018] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-admin/wp-configs.php"] [unique_id "aZmLLuIr-8fgvpvBQQ3HvQAAAAM"] [Sat Feb 21 15:38:38.394074 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/meew.php [Sat Feb 21 15:38:38.592976 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/add.php [Sat Feb 21 15:38:38.791860 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/8.php [Sat Feb 21 15:38:38.990772 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/ty.php [Sat Feb 21 15:38:39.191215 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/sys.php [Sat Feb 21 15:38:39.390926 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/mass.php [Sat Feb 21 15:38:39.589568 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfa.php [Sat Feb 21 15:38:39.789249 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/71.php [Sat Feb 21 15:38:39.988338 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/admin-footer.php [Sat Feb 21 15:38:40.187675 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/webdb.php [Sat Feb 21 15:38:40.386861 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/plugin.php [Sat Feb 21 15:38:40.586492 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/lib.php [Sat Feb 21 15:38:40.787073 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/makeasmtp.php [Sat Feb 21 15:38:40.987367 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/zeal.php [Sat Feb 21 15:38:41.186620 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/sc.php [Sat Feb 21 15:38:41.187853 2026] [security2:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "mail.master-comm.net"] [uri "/sc.php"] [unique_id "aZmLMU2JgS98vN9XlLXKlAAAAAw"] [Sat Feb 21 15:38:41.187918 2026] [security2:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "mail.master-comm.net"] [uri "/sc.php"] [unique_id "aZmLMU2JgS98vN9XlLXKlAAAAAw"] [Sat Feb 21 15:38:41.385781 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/setup-config.php [Sat Feb 21 15:38:41.584686 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/txets.php [Sat Feb 21 15:38:41.785498 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-head.php [Sat Feb 21 15:38:42.186087 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/cmdo.php [Sat Feb 21 15:38:42.385274 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/p.php [Sat Feb 21 15:38:42.586224 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/Capte.php [Sat Feb 21 15:38:42.785669 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/ccou.php [Sat Feb 21 15:38:42.984852 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/503.php [Sat Feb 21 15:38:43.184014 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/ws66.php [Sat Feb 21 15:38:43.384491 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/xa.php [Sat Feb 21 15:38:43.583469 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/666.php [Sat Feb 21 15:38:43.782859 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/error.php [Sat Feb 21 15:38:43.982373 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/222.php [Sat Feb 21 15:38:44.181944 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wen.php [Sat Feb 21 15:38:44.381555 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/buy.php [Sat Feb 21 15:38:44.581293 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/environment.php [Sat Feb 21 15:38:44.780638 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/styles.php [Sat Feb 21 15:38:44.980141 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-4doption1.php [Sat Feb 21 15:38:45.380713 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/1.php [Sat Feb 21 15:38:45.789998 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/atomlib.php [Sat Feb 21 15:38:45.988958 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/cwclass.php [Sat Feb 21 15:38:46.188035 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/asasx.php [Sat Feb 21 15:38:46.387229 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/ioxi-o.php [Sat Feb 21 15:38:46.485049 2026] [core:error] [pid 2029018:tid 2029018] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.485151 2026] [core:error] [pid 2029018:tid 2029018] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.518113 2026] [core:error] [pid 2072461:tid 2072461] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.518173 2026] [core:error] [pid 2072461:tid 2072461] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.551423 2026] [core:error] [pid 2053683:tid 2053683] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.551500 2026] [core:error] [pid 2053683:tid 2053683] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.583232 2026] [core:error] [pid 2012077:tid 2012077] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.583290 2026] [core:error] [pid 2012077:tid 2012077] [client 68.221.64.54:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:38:46.585841 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/z60.php [Sat Feb 21 15:38:46.784866 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/dropdown.php [Sat Feb 21 15:38:46.988786 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/admin.php [Sat Feb 21 15:38:47.189343 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-tot.php [Sat Feb 21 15:38:47.589428 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/retu11.PhP7 [Sat Feb 21 15:38:47.789026 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/class.php [Sat Feb 21 15:38:47.988040 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/404.php [Sat Feb 21 15:38:48.187332 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/mode.php [Sat Feb 21 15:38:48.386602 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/aboutc.php [Sat Feb 21 15:38:48.585813 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/sx.php [Sat Feb 21 15:38:48.784866 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/themes.php [Sat Feb 21 15:38:48.984126 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/yawa.php [Sat Feb 21 15:38:49.028928 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:38:49.183002 2026] [access_compat:error] [pid 2067416:tid 2067416] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/m.php [Sat Feb 21 15:38:49.579809 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/item.php [Sat Feb 21 15:38:49.779302 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/403.php [Sat Feb 21 15:38:49.978968 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/gg.php [Sat Feb 21 15:38:50.178374 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/akcc.php [Sat Feb 21 15:38:50.377111 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/radio.php [Sat Feb 21 15:38:50.576207 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/xa.php [Sat Feb 21 15:38:50.775058 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/backup.php [Sat Feb 21 15:38:50.973937 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/galex.php [Sat Feb 21 15:38:51.374169 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/about.php [Sat Feb 21 15:38:51.573618 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/vx.php [Sat Feb 21 15:38:51.773441 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/classwithtostring.php [Sat Feb 21 15:38:52.191687 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/fff.php [Sat Feb 21 15:38:52.390654 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/revision.php [Sat Feb 21 15:38:52.523752 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLPMrssm78_TCE3WXKMQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:38:52.523818 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLPMrssm78_TCE3WXKMQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:38:52.589750 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/content.php [Sat Feb 21 15:38:52.789067 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/menu.php [Sat Feb 21 15:38:52.988410 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/gifclass.php [Sat Feb 21 15:38:53.387210 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/css.php [Sat Feb 21 15:38:53.586312 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/x7.php [Sat Feb 21 15:38:53.785931 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/bugger.php [Sat Feb 21 15:38:53.835253 2026] [security2:error] [pid 2012077:tid 2012077] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/FroggBaba.php"] [unique_id "aZmLPVQdZ64h20JcCSpD7QAAAAs"] [Sat Feb 21 15:38:53.835329 2026] [security2:error] [pid 2012077:tid 2012077] [client 37.140.254.93:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/FroggBaba.php"] [unique_id "aZmLPVQdZ64h20JcCSpD7QAAAAs"] [Sat Feb 21 15:38:54.185734 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/simple.php [Sat Feb 21 15:38:54.385117 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfa.php [Sat Feb 21 15:38:54.584253 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-file.php [Sat Feb 21 15:38:54.783253 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/as.php [Sat Feb 21 15:38:54.982543 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/X57.php [Sat Feb 21 15:38:55.181548 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/abc.php [Sat Feb 21 15:38:55.381042 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/gettest.php [Sat Feb 21 15:38:55.580365 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/sbhu.php [Sat Feb 21 15:38:55.781163 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-trackback.php [Sat Feb 21 15:38:55.980096 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfashell.php [Sat Feb 21 15:38:56.379498 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/aaa.php [Sat Feb 21 15:38:56.578429 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/chosen.php [Sat Feb 21 15:38:56.777555 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/tmpls.php [Sat Feb 21 15:38:56.976260 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/gtc.php [Sat Feb 21 15:38:57.175722 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/ty.php [Sat Feb 21 15:38:57.376782 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/0x.php [Sat Feb 21 15:38:57.576248 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/inputs.php [Sat Feb 21 15:38:57.775590 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/test1.php [Sat Feb 21 15:38:57.974840 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/new4.php [Sat Feb 21 15:38:58.174311 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/img.php [Sat Feb 21 15:38:58.373883 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.php [Sat Feb 21 15:38:58.589833 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/w.php [Sat Feb 21 15:38:58.788921 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/f35.php [Sat Feb 21 15:38:59.589479 2026] [access_compat:error] [pid 2053683:tid 2053683] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/siteheads.php [Sat Feb 21 15:38:59.989150 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/admin.php [Sat Feb 21 15:39:00.189005 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/cwclass.php [Sat Feb 21 15:39:00.991500 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/g.php [Sat Feb 21 15:39:01.392006 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/install.php [Sat Feb 21 15:39:01.794165 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/autoload_classmap.php [Sat Feb 21 15:39:01.993477 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] AH01797: client denied by server configuration: /home/masterco/public_html/bgymj.php [Sat Feb 21 15:39:19.997813 2026] [proxy_fcgi:error] [pid 2053132:tid 2053132] [client 20.100.195.34:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:39:20.029652 2026] [proxy_fcgi:error] [pid 2053683:tid 2053683] [client 20.100.195.34:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:39:20.061097 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.100.195.34:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 15:39:37.860076 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/plugins/wp-theme-editor/"] [unique_id "aZmLaU2JgS98vN9XlLXK1gAAAAw"] [Sat Feb 21 15:39:37.860172 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/plugins/wp-theme-editor/"] [unique_id "aZmLaU2JgS98vN9XlLXK1gAAAAw"] [Sat Feb 21 15:39:41.116097 2026] [security2:error] [pid 2058141:tid 2058141] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/plugins/fix/"] [unique_id "aZmLbbBoqed92ItjVUgHHAAAAAg"] [Sat Feb 21 15:39:41.116230 2026] [security2:error] [pid 2058141:tid 2058141] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/wp-content/plugins/fix/"] [unique_id "aZmLbbBoqed92ItjVUgHHAAAAAg"] [Sat Feb 21 15:39:49.718395 2026] [security2:error] [pid 2058141:tid 2058141] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo8.247reactionpower.com"] [uri "/zwso.php"] [unique_id "aZmLdbBoqed92ItjVUgHKgAAAAg"] [Sat Feb 21 15:39:49.718466 2026] [security2:error] [pid 2058141:tid 2058141] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo8.247reactionpower.com"] [uri "/zwso.php"] [unique_id "aZmLdbBoqed92ItjVUgHKgAAAAg"] [Sat Feb 21 15:39:49.841678 2026] [security2:error] [pid 2053683:tid 2053683] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo8.247reactionpower.com"] [uri "/trd.php"] [unique_id "aZmLdU2JgS98vN9XlLXK5wAAAAw"] [Sat Feb 21 15:39:49.841739 2026] [security2:error] [pid 2053683:tid 2053683] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo8.247reactionpower.com"] [uri "/trd.php"] [unique_id "aZmLdU2JgS98vN9XlLXK5wAAAAw"] [Sat Feb 21 15:39:50.975885 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLdnzIHFng0nDt3VF13wAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:39:50.975946 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLdnzIHFng0nDt3VF13wAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:39:56.747266 2026] [security2:error] [pid 2048946:tid 2048946] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo8.247reactionpower.com"] [uri "/wp-content/admin.php"] [unique_id "aZmLfA6zZrsiEKn4Yr9YzwAAAAA"] [Sat Feb 21 15:39:56.747430 2026] [security2:error] [pid 2048946:tid 2048946] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo8.247reactionpower.com"] [uri "/wp-content/admin.php"] [unique_id "aZmLfA6zZrsiEKn4Yr9YzwAAAAA"] [Sat Feb 21 15:40:03.665854 2026] [security2:error] [pid 2039657:tid 2039657] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/www/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aZmLgy9RbKAccNLF-QE9swAAAAc"] [Sat Feb 21 15:40:03.665924 2026] [security2:error] [pid 2039657:tid 2039657] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/www/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aZmLgy9RbKAccNLF-QE9swAAAAc"] [Sat Feb 21 15:40:04.405666 2026] [security2:error] [pid 2058769:tid 2058769] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/js/widgets/"] [unique_id "aZmLhEsPNwlk_ki2D0hrBgAAAAY"] [Sat Feb 21 15:40:04.405728 2026] [security2:error] [pid 2058769:tid 2058769] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/js/widgets/"] [unique_id "aZmLhEsPNwlk_ki2D0hrBgAAAAY"] [Sat Feb 21 15:40:04.707125 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLhE2JgS98vN9XlLXK_gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:40:04.707218 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLhE2JgS98vN9XlLXK_gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:40:05.706520 2026] [security2:error] [pid 2058769:tid 2058769] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/themes/"] [unique_id "aZmLhUsPNwlk_ki2D0hrCAAAAAY"] [Sat Feb 21 15:40:05.706586 2026] [security2:error] [pid 2058769:tid 2058769] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/themes/"] [unique_id "aZmLhUsPNwlk_ki2D0hrCAAAAAY"] [Sat Feb 21 15:40:07.349959 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:40:14.513203 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-global": Permission denied [hostname "5starapptex.com"] [uri "/images/smilies/"] [unique_id "aZmLjk2JgS98vN9XlLXLCwAAAAw"] [Sat Feb 21 15:40:14.513331 2026] [security2:error] [pid 2053683:tid 2053683] [client 37.140.254.72:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/starapptex-ip": Permission denied [hostname "5starapptex.com"] [uri "/images/smilies/"] [unique_id "aZmLjk2JgS98vN9XlLXLCwAAAAw"] [Sat Feb 21 15:40:19.383945 2026] [authz_core:error] [pid 2058769:tid 2058769] [client 161.97.90.16:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 15:40:21.002452 2026] [cgi:error] [pid 2039657:tid 2039657] [client 20.205.120.43:0] AH02812: stderr from /home/redpenguinit/demo.redpenguinit.com/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:40:32.909317 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 161.97.90.16:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 15:40:59.900167 2026] [security2:error] [pid 2048946:tid 2048946] [client 161.97.90.16:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZmLuw6zZrsiEKn4Yr9ZBwAAAAA"], referer: binance.com [Sat Feb 21 15:40:59.900236 2026] [security2:error] [pid 2048946:tid 2048946] [client 161.97.90.16:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZmLuw6zZrsiEKn4Yr9ZBwAAAAA"], referer: binance.com [Sat Feb 21 15:41:00.468142 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLvEsPNwlk_ki2D0hrLwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:41:00.468247 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLvEsPNwlk_ki2D0hrLwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:41:05.324154 2026] [proxy_fcgi:error] [pid 2058769:tid 2058769] [client 107.189.30.143:0] AH01071: Got error 'Primary script unknown', referer: http://www.google.com.hk [Sat Feb 21 15:41:10.287034 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLxksPNwlk_ki2D0hrMwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:41:10.287120 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLxksPNwlk_ki2D0hrMwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:41:17.572568 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLzeIr-8fgvpvBQQ3IZAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:41:17.572664 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmLzeIr-8fgvpvBQQ3IZAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:42:06.445269 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmL_g6zZrsiEKn4Yr9ZIwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:42:06.445472 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmL_g6zZrsiEKn4Yr9ZIwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:42:15.404531 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMBw6zZrsiEKn4Yr9ZJwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:42:15.404600 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMBw6zZrsiEKn4Yr9ZJwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:43:18.487770 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMRk2JgS98vN9XlLXLZQAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:43:18.487856 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMRk2JgS98vN9XlLXLZQAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 15:43:29.660899 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMUbBoqed92ItjVUgHtAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:43:29.660983 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMUbBoqed92ItjVUgHtAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 15:44:01.828125 2026] [security2:error] [pid 2053132:tid 2053132] [client 203.188.171.53:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "3mlittmann.us"] [uri "/.env"] [unique_id "aZmMcXzIHFng0nDt3VF2ZwAAAAU"] [Sat Feb 21 15:44:17.156533 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMgUsPNwlk_ki2D0hrggAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:44:17.156615 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMgUsPNwlk_ki2D0hrggAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 15:44:18.742337 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMgq_eqbquRKin0NLyZwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:44:18.742483 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMgq_eqbquRKin0NLyZwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:44:37.764195 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:44:48.349083 2026] [core:error] [pid 2053132:tid 2053132] [client 4.232.89.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:44:48.349166 2026] [core:error] [pid 2053132:tid 2053132] [client 4.232.89.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:44:48.373004 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 4.232.89.175:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 15:44:48.374050 2026] [core:error] [pid 2048946:tid 2048946] [client 4.232.89.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:44:48.397582 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 4.232.89.175:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sc.php [Sat Feb 21 15:44:48.399370 2026] [core:error] [pid 2012077:tid 2012077] [client 4.232.89.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:44:48.425390 2026] [core:error] [pid 2039657:tid 2039657] [client 4.232.89.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:44:48.425495 2026] [core:error] [pid 2039657:tid 2039657] [client 4.232.89.175:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:44:48.782072 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMoEsPNwlk_ki2D0hrkAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:44:48.782161 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMoEsPNwlk_ki2D0hrkAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:45:13.558130 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMuXzIHFng0nDt3VF2hAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:45:13.558226 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMuXzIHFng0nDt3VF2hAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 15:45:32.044826 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMy8rssm78_TCE3WXLIQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:45:32.044920 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmMy8rssm78_TCE3WXLIQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 15:45:40.177927 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 66.249.79.201:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 15:46:03.386138 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmM63zIHFng0nDt3VF2mQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:46:03.386209 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmM63zIHFng0nDt3VF2mQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:46:11.660232 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:46:11.695462 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:46:30.688049 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNBk2JgS98vN9XlLXLuAAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:46:30.688163 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNBk2JgS98vN9XlLXLuAAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:46:37.631710 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNDQ6zZrsiEKn4Yr9ZkgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:46:37.631797 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNDQ6zZrsiEKn4Yr9ZkgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:47:21.117244 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNOa_eqbquRKin0NLytAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:47:21.117371 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNOa_eqbquRKin0NLytAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:48:02.605746 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNYk2JgS98vN9XlLXL5gAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:48:02.605842 2026] [security2:error] [pid 2053683:tid 2053683] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNYk2JgS98vN9XlLXL5gAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:48:05.162864 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNZbBoqed92ItjVUgIMgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:48:05.162985 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNZbBoqed92ItjVUgIMgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:48:10.889617 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNag6zZrsiEKn4Yr9ZwAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:48:10.889699 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNag6zZrsiEKn4Yr9ZwAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:48:25.934653 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:48:39.800326 2026] [security2:error] [pid 2048946:tid 2048946] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmNhw6zZrsiEKn4Yr9Z1AAAAAA"] [Sat Feb 21 15:48:39.800402 2026] [security2:error] [pid 2048946:tid 2048946] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmNhw6zZrsiEKn4Yr9Z1AAAAAA"] [Sat Feb 21 15:48:48.941709 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNkEsPNwlk_ki2D0hsBQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:48:48.941845 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNkEsPNwlk_ki2D0hsBQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:49:00.095642 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNm0sPNwlk_ki2D0hsCgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:49:00.095744 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmNm0sPNwlk_ki2D0hsCgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:49:10.200814 2026] [security2:error] [pid 2029018:tid 2029018] [client 147.135.215.173:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "serversvalley.com"] [uri "/robots.txt"] [unique_id "aZmNpuIr-8fgvpvBQQ3JPAAAAAM"] [Sat Feb 21 15:49:10.200883 2026] [security2:error] [pid 2029018:tid 2029018] [client 147.135.215.173:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "serversvalley.com"] [uri "/robots.txt"] [unique_id "aZmNpuIr-8fgvpvBQQ3JPAAAAAM"] [Sat Feb 21 15:49:34.207494 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.207564 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.208649 2026] [security2:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmNvi9RbKAccNLF-QE-0QAAAAc"] [Sat Feb 21 15:49:34.208680 2026] [security2:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmNvi9RbKAccNLF-QE-0QAAAAc"] [Sat Feb 21 15:49:34.514981 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.515051 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.753458 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.753528 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.982395 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:34.982453 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.211274 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.211356 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.442088 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.442225 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.680114 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.680180 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.918999 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:35.919073 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.165398 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.165456 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.477555 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.477627 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.714003 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.714077 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.950199 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:36.950288 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.182995 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.183073 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.474621 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.474695 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.707102 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.707180 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.941160 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:37.941307 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.171195 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.171266 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.400151 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.400226 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.667835 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.667904 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.897327 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:38.897381 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.137396 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.137467 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.367805 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.367870 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.596968 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.597020 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.826346 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:39.826432 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.060528 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.060581 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.290976 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.291038 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.530910 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.530995 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.840418 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:40.840478 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.070095 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.070160 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.304791 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.304854 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.643272 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.643345 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.872969 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:41.873039 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.166885 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.166969 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.401948 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.402030 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.640829 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.640886 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.870580 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:42.870649 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.099912 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.099975 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.402526 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.402577 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.637827 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.637884 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.638305 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmNx1QdZ64h20JcCSpFbgAAAAs"] [Sat Feb 21 15:49:43.638362 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmNx1QdZ64h20JcCSpFbgAAAAs"] [Sat Feb 21 15:49:43.867111 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:43.867159 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.095787 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.095835 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.325656 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.325699 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.555348 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.555422 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.785520 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:44.785616 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.087273 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.087337 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.395964 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.396013 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.638109 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.638167 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.867310 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:45.867379 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.098258 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.098308 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.327169 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.327224 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.568709 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.568771 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.798712 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:46.798773 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.028744 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.028819 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.258657 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.258719 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.488116 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.488180 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.722780 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.722894 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.953892 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:47.953968 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.183231 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.183272 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.411711 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.411794 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.412387 2026] [security2:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmNzHzIHFng0nDt3VF3BAAAAAU"] [Sat Feb 21 15:49:48.412415 2026] [security2:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmNzHzIHFng0nDt3VF3BAAAAAU"] [Sat Feb 21 15:49:48.648950 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.649003 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.884802 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:48.884847 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.129939 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.130002 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.338811 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.219.0.101:0] AH01797: client denied by server configuration: /home/vascardmedical/public_html/wp-content/uploads/wc-logs/ [Sat Feb 21 15:49:49.344554 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 20.219.0.101:0] AH01797: client denied by server configuration: /home/vascardmedical/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 15:49:49.359749 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.359823 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.658886 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.658974 2026] [core:error] [pid 2029018:tid 2029018] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.888280 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:49.888315 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.125034 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.125083 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.354821 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.354888 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.589676 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.589739 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.819026 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:50.819081 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.053714 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.053783 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.292627 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.292690 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.526170 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.526241 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.755055 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.755109 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.988853 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:51.988893 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.231033 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.231098 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.460940 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.460993 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.690730 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.690793 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.923472 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:52.923536 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.166387 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.166501 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.398617 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.398677 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.447923 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmN0UsPNwlk_ki2D0hsKgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:49:53.448007 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmN0UsPNwlk_ki2D0hsKgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:49:53.633803 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.633879 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.917978 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:53.918059 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.160263 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.160331 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.402081 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.402149 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.649829 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.649903 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.879510 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:54.879558 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.124141 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.124199 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.364539 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.364614 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.593601 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.593671 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.823539 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:55.823605 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.052572 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.052624 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.285089 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.285139 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.513945 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.513997 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.752971 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.753037 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.990942 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:56.990996 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:57.226002 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:57.226067 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:57.458671 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:57.458723 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:57.722858 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:57.722941 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.022333 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.022397 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.275734 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.275802 2026] [core:error] [pid 2072461:tid 2072461] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.504487 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.504536 2026] [core:error] [pid 2049075:tid 2049075] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.734709 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.734762 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.974440 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:58.974507 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.211050 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.211100 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.440471 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.440524 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.670144 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.670236 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.898515 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:49:59.898567 2026] [core:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.130333 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.130464 2026] [core:error] [pid 2053683:tid 2053683] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.360512 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.360561 2026] [core:error] [pid 2048946:tid 2048946] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.590065 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.590142 2026] [core:error] [pid 2058141:tid 2058141] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.856057 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:00.856138 2026] [core:error] [pid 2058769:tid 2058769] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:01.091442 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:01.091524 2026] [core:error] [pid 2039657:tid 2039657] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:01.334919 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:01.334993 2026] [core:error] [pid 2053132:tid 2053132] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 15:50:05.196335 2026] [cgi:error] [pid 2072461:tid 2072461] [client 20.219.0.101:0] AH02812: stderr from /home/vascardmedical/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:50:33.402231 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmN-VQdZ64h20JcCSpFkQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:50:33.402349 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmN-VQdZ64h20JcCSpFkQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:50:37.508561 2026] [authz_core:error] [pid 2058769:tid 2058769] [client 20.219.0.101:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/customize/error_log [Sat Feb 21 15:50:50.992486 2026] [security2:error] [pid 2012077:tid 2012077] [client 107.189.30.143:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-global": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOClQdZ64h20JcCSpFnwAAAAs"] [Sat Feb 21 15:50:50.992578 2026] [security2:error] [pid 2012077:tid 2012077] [client 107.189.30.143:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-ip": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOClQdZ64h20JcCSpFnwAAAAs"] [Sat Feb 21 15:50:50.992668 2026] [security2:error] [pid 2012077:tid 2012077] [client 107.189.30.143:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1550 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOClQdZ64h20JcCSpFnwAAAAs"] [Sat Feb 21 15:50:57.342202 2026] [negotiation:error] [pid 2053683:tid 2053683] [client 20.53.240.38:0] AH00687: Negotiation: discovered file(s) matching request: /home/mrxdc/public_html/bk (None could be negotiated). [Sat Feb 21 15:50:57.482965 2026] [authz_core:error] [pid 2053132:tid 2053132] [client 20.219.0.101:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-admin/maint/error_log [Sat Feb 21 15:51:00.678097 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:51:05.111781 2026] [authz_core:error] [pid 2049075:tid 2049075] [client 20.219.0.101:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/pomo/error_log [Sat Feb 21 15:51:18.508532 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOJuIr-8fgvpvBQQ3JhwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:51:18.508613 2026] [security2:error] [pid 2029018:tid 2029018] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOJuIr-8fgvpvBQQ3JhwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:51:21.629875 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOKUsPNwlk_ki2D0hsZAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:51:21.629941 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOKUsPNwlk_ki2D0hsZAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:51:49.707183 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmORXzIHFng0nDt3VF3VQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:51:49.707293 2026] [security2:error] [pid 2053132:tid 2053132] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmORXzIHFng0nDt3VF3VQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:51:50.144870 2026] [security2:error] [pid 2058141:tid 2058141] [client 20.219.0.101:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-global": Permission denied [hostname "mail.vascardmedical.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmORbBoqed92ItjVUgIuwAAAAg"] [Sat Feb 21 15:51:50.144950 2026] [security2:error] [pid 2058141:tid 2058141] [client 20.219.0.101:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-ip": Permission denied [hostname "mail.vascardmedical.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmORbBoqed92ItjVUgIuwAAAAg"] [Sat Feb 21 15:51:54.520234 2026] [security2:error] [pid 2053132:tid 2053132] [client 20.219.0.101:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-global": Permission denied [hostname "mail.vascardmedical.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmOSXzIHFng0nDt3VF3WQAAAAU"] [Sat Feb 21 15:51:54.520347 2026] [security2:error] [pid 2053132:tid 2053132] [client 20.219.0.101:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-ip": Permission denied [hostname "mail.vascardmedical.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmOSXzIHFng0nDt3VF3WQAAAAU"] [Sat Feb 21 15:51:58.877442 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:51:59.186115 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOT0sPNwlk_ki2D0hseAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:51:59.186196 2026] [security2:error] [pid 2058769:tid 2058769] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOT0sPNwlk_ki2D0hseAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:52:08.335122 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:52:13.468847 2026] [security2:error] [pid 2039657:tid 2039657] [client 107.189.30.143:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-global": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOXS9RbKAccNLF-QE_QwAAAAc"] [Sat Feb 21 15:52:13.468932 2026] [security2:error] [pid 2039657:tid 2039657] [client 107.189.30.143:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-ip": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOXS9RbKAccNLF-QE_QwAAAAc"] [Sat Feb 21 15:52:13.469020 2026] [security2:error] [pid 2039657:tid 2039657] [client 107.189.30.143:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1552 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOXS9RbKAccNLF-QE_QwAAAAc"] [Sat Feb 21 15:52:13.526310 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOXQ6zZrsiEKn4Yr9aXAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:52:13.526382 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOXQ6zZrsiEKn4Yr9aXAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 15:52:16.466466 2026] [security2:error] [pid 2078938:tid 2078938] [client 107.189.30.143:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-global": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOYDSRvv0awrOt-JDwNwAAAAE"] [Sat Feb 21 15:52:16.466564 2026] [security2:error] [pid 2078938:tid 2078938] [client 107.189.30.143:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-ip": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOYDSRvv0awrOt-JDwNwAAAAE"] [Sat Feb 21 15:52:16.466622 2026] [security2:error] [pid 2078938:tid 2078938] [client 107.189.30.143:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1552 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmOYDSRvv0awrOt-JDwNwAAAAE"] [Sat Feb 21 15:52:21.893521 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/new4.php [Sat Feb 21 15:52:21.919842 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/sc.php [Sat Feb 21 15:52:21.969801 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/yussef.php [Sat Feb 21 15:52:22.087559 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp-session.php [Sat Feb 21 15:52:22.114590 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/tailed.php [Sat Feb 21 15:52:22.143260 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/aq.php [Sat Feb 21 15:52:22.169789 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/opts.php [Sat Feb 21 15:52:22.195761 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/x123.php [Sat Feb 21 15:52:22.283622 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp-act.php [Sat Feb 21 15:52:22.309894 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/moshou.php [Sat Feb 21 15:52:22.382889 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/seetox.php [Sat Feb 21 15:52:22.417692 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/dom.php [Sat Feb 21 15:52:22.453885 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/samiri.php [Sat Feb 21 15:52:22.482647 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/plugins.php [Sat Feb 21 15:52:22.576379 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xoot.php [Sat Feb 21 15:52:22.669342 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/X57.php [Sat Feb 21 15:52:22.755614 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/vx.php [Sat Feb 21 15:52:22.787079 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/file59.php [Sat Feb 21 15:52:22.889571 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/shas.php [Sat Feb 21 15:52:23.013994 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xa.php [Sat Feb 21 15:52:23.040298 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xda.php [Sat Feb 21 15:52:23.069833 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/er.php [Sat Feb 21 15:52:23.097537 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/fault.php [Sat Feb 21 15:52:23.214351 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/motu.php [Sat Feb 21 15:52:23.241784 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/66.php [Sat Feb 21 15:52:23.269972 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/leuk.php [Sat Feb 21 15:52:23.405028 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xqq.php [Sat Feb 21 15:52:23.463969 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/kolda.php [Sat Feb 21 15:52:23.491759 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/nw.php [Sat Feb 21 15:52:23.518750 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/god.php [Sat Feb 21 15:52:23.588726 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/666.php [Sat Feb 21 15:52:23.680650 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/kj.php [Sat Feb 21 15:52:23.715245 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/un.php [Sat Feb 21 15:52:23.803809 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/fs.php [Sat Feb 21 15:52:23.830861 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ms.php [Sat Feb 21 15:52:23.882907 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/login8.php [Sat Feb 21 15:52:23.948344 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/nnyvn.php [Sat Feb 21 15:52:23.974783 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/cu.php [Sat Feb 21 15:52:24.000976 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/lul.php [Sat Feb 21 15:52:24.118678 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/0.php [Sat Feb 21 15:52:24.144790 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ms-edit.php [Sat Feb 21 15:52:24.179190 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ya.php [Sat Feb 21 15:52:24.306644 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/grsiuk.php [Sat Feb 21 15:52:24.338533 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp-blog.php [Sat Feb 21 15:52:24.366269 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp-access.php [Sat Feb 21 15:52:24.443278 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/a1vx.php [Sat Feb 21 15:52:24.469770 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/sbhu.php [Sat Feb 21 15:52:24.495971 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp-the.php [Sat Feb 21 15:52:24.573570 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/06.php [Sat Feb 21 15:52:24.600626 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp5.php [Sat Feb 21 15:52:24.678771 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/fot.php [Sat Feb 21 15:52:24.713808 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ff1.php [Sat Feb 21 15:52:24.739463 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/forbidals.php [Sat Feb 21 15:52:24.785996 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/erty.php [Sat Feb 21 15:52:24.812899 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/dev1s.php [Sat Feb 21 15:52:24.839670 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ffd.php [Sat Feb 21 15:52:24.936965 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/admiin.php [Sat Feb 21 15:52:24.970868 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ol.php [Sat Feb 21 15:52:25.013309 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/Sanskrit.php [Sat Feb 21 15:52:25.039871 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/vxrl.php [Sat Feb 21 15:52:25.066273 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/re.php [Sat Feb 21 15:52:25.153023 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/num.php [Sat Feb 21 15:52:25.310089 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/axx.php [Sat Feb 21 15:52:25.336799 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/vxrl.php [Sat Feb 21 15:52:25.366586 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/in.php [Sat Feb 21 15:52:25.618595 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/style.php [Sat Feb 21 15:52:25.843896 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/we.php [Sat Feb 21 15:52:25.955616 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/zwso.php [Sat Feb 21 15:52:26.042860 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/karak.php [Sat Feb 21 15:52:26.103041 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/prv8.php [Sat Feb 21 15:52:26.235565 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/i.php [Sat Feb 21 15:52:26.261447 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/a.php [Sat Feb 21 15:52:26.292114 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xmlrpc.php [Sat Feb 21 15:52:26.320933 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/aw.php [Sat Feb 21 15:52:26.347510 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/dev.php [Sat Feb 21 15:52:26.401489 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/155.php [Sat Feb 21 15:52:26.438952 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/goat.php [Sat Feb 21 15:52:26.529555 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/tcp.php [Sat Feb 21 15:52:26.622994 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/inputs.php [Sat Feb 21 15:52:26.649164 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ioxi.php [Sat Feb 21 15:52:26.676714 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/fe5.php [Sat Feb 21 15:52:26.703589 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ov.php [Sat Feb 21 15:52:26.810817 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/default.php [Sat Feb 21 15:52:26.839818 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/goods.php [Sat Feb 21 15:52:26.869333 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/abcd.php [Sat Feb 21 15:52:26.933551 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/class.1.php [Sat Feb 21 15:52:26.994676 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/async.php [Sat Feb 21 15:52:27.035095 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ff.php [Sat Feb 21 15:52:27.061384 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ioxi-o.php [Sat Feb 21 15:52:27.088300 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/manager.php [Sat Feb 21 15:52:27.343055 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp-update.php [Sat Feb 21 15:52:27.401986 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/file.php [Sat Feb 21 15:52:27.573680 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/lc.php [Sat Feb 21 15:52:27.604865 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/cbrfo.php [Sat Feb 21 15:52:27.662074 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/inc.php [Sat Feb 21 15:52:27.859560 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/gifclass.php [Sat Feb 21 15:52:27.887564 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/miansha.php [Sat Feb 21 15:52:28.038349 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/tinyfilemanager.php [Sat Feb 21 15:52:28.171314 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ok.php [Sat Feb 21 15:52:28.198253 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/fi.php [Sat Feb 21 15:52:28.226315 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/muzu.php [Sat Feb 21 15:52:28.309191 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/reze.php [Sat Feb 21 15:52:28.354613 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/styll.php [Sat Feb 21 15:52:28.469168 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/x7.php [Sat Feb 21 15:52:28.545930 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/thebe.php [Sat Feb 21 15:52:28.635765 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ddd.php [Sat Feb 21 15:52:28.661890 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/bgymj.php [Sat Feb 21 15:52:28.695279 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/8xyz.php [Sat Feb 21 15:52:28.721445 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/ioxi.php [Sat Feb 21 15:52:28.747667 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xpwer1.php [Sat Feb 21 15:52:28.795665 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/lala.php [Sat Feb 21 15:52:29.040092 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/info.php [Sat Feb 21 15:52:29.264037 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/222.php [Sat Feb 21 15:52:29.290779 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/adminfuns.php [Sat Feb 21 15:52:29.291651 2026] [security2:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "testone.onebox.pk"] [uri "/adminfuns.php"] [unique_id "aZmObXzIHFng0nDt3VF3fwAAAAU"] [Sat Feb 21 15:52:29.291832 2026] [security2:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "testone.onebox.pk"] [uri "/adminfuns.php"] [unique_id "aZmObXzIHFng0nDt3VF3fwAAAAU"] [Sat Feb 21 15:52:29.465664 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xx.php [Sat Feb 21 15:52:29.522458 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/f5.php [Sat Feb 21 15:52:29.549648 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/flower.php [Sat Feb 21 15:52:29.577693 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/f6.php [Sat Feb 21 15:52:29.603506 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/edit.php [Sat Feb 21 15:52:29.945491 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/av.php [Sat Feb 21 15:52:30.032425 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wsd.php [Sat Feb 21 15:52:30.073828 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/jane.php [Sat Feb 21 15:52:30.109788 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/css.php [Sat Feb 21 15:52:30.160838 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/alfa.php [Sat Feb 21 15:52:30.187528 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wen.php [Sat Feb 21 15:52:30.238184 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/x.php [Sat Feb 21 15:52:30.323208 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/xxxx.php [Sat Feb 21 15:52:30.404917 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/class.php [Sat Feb 21 15:52:30.462258 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/f35.php [Sat Feb 21 15:52:30.670431 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/class-t.api.php [Sat Feb 21 15:52:30.698006 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/blurbs18.php [Sat Feb 21 15:52:30.742838 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/.well-known/gecko-litespeed.php [Sat Feb 21 15:52:31.110717 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/bless11.php [Sat Feb 21 15:52:31.137877 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/init.php [Sat Feb 21 15:52:31.253026 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/k.php [Sat Feb 21 15:52:31.312101 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/bless.php [Sat Feb 21 15:52:31.374012 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/X7x.php [Sat Feb 21 15:52:31.399720 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/166.php [Sat Feb 21 15:52:31.426377 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/plss3.php [Sat Feb 21 15:52:31.786152 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/admins.php [Sat Feb 21 15:52:31.848299 2026] [access_compat:error] [pid 2053132:tid 2053132] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/wp.php [Sat Feb 21 15:52:31.874768 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/main.php [Sat Feb 21 15:52:31.904119 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/a1.php [Sat Feb 21 15:52:31.940544 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/lala.php [Sat Feb 21 15:52:31.976263 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/aaa.php [Sat Feb 21 15:52:32.002815 2026] [access_compat:error] [pid 2029018:tid 2029018] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/a2.php [Sat Feb 21 15:52:32.135350 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 40.69.27.251:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testone.onebox.pk/jsond.php [Sat Feb 21 15:52:38.024335 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOda_eqbquRKin0NLziwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:52:38.024507 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOda_eqbquRKin0NLziwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 15:52:53.597671 2026] [security2:error] [pid 2053132:tid 2053132] [client 157.55.39.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmOhHzIHFng0nDt3VF3jwAAAAU"] [Sat Feb 21 15:52:53.597775 2026] [security2:error] [pid 2053132:tid 2053132] [client 157.55.39.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmOhHzIHFng0nDt3VF3jwAAAAU"] [Sat Feb 21 15:53:07.155485 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOk8rssm78_TCE3WXMMQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:53:07.155783 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOk8rssm78_TCE3WXMMQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:53:16.826128 2026] [security2:error] [pid 2058141:tid 2058141] [client 172.245.102.51:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmOm7Boqed92ItjVUgI_AAAAAg"] [Sat Feb 21 15:53:16.826406 2026] [security2:error] [pid 2058141:tid 2058141] [client 172.245.102.51:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmOm7Boqed92ItjVUgI_AAAAAg"] [Sat Feb 21 15:53:47.233603 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOu7Boqed92ItjVUgJDwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:53:47.233699 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmOu7Boqed92ItjVUgJDwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 15:53:49.694831 2026] [security2:error] [pid 2053132:tid 2053132] [client 154.192.78.40:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/2023/12/footer-bg.jpg"] [unique_id "aZmOvXzIHFng0nDt3VF3tQAAAAU"], referer: https://arcticairandrefrigeration.com/specials/ [Sat Feb 21 15:53:49.694946 2026] [security2:error] [pid 2053132:tid 2053132] [client 154.192.78.40:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/uploads/2023/12/footer-bg.jpg"] [unique_id "aZmOvXzIHFng0nDt3VF3tQAAAAU"], referer: https://arcticairandrefrigeration.com/specials/ [Sat Feb 21 15:54:13.625989 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmO1bBoqed92ItjVUgJHgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:54:13.626127 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmO1bBoqed92ItjVUgJHgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 15:54:37.236928 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:54:51.253101 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmO-1QdZ64h20JcCSpGOQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:54:51.253192 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmO-1QdZ64h20JcCSpGOQAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 15:54:52.478525 2026] [security2:error] [pid 2048946:tid 2048946] [client 114.119.135.207:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmO-g6zZrsiEKn4Yr9ayQAAAAA"], referer: https://alliancechem-eng.com/service/closed-circuit-chemicals/ [Sat Feb 21 15:54:52.478578 2026] [security2:error] [pid 2048946:tid 2048946] [client 114.119.135.207:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmO-g6zZrsiEKn4Yr9ayQAAAAA"], referer: https://alliancechem-eng.com/service/closed-circuit-chemicals/ [Sat Feb 21 15:55:44.072058 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPLw6zZrsiEKn4Yr9a4AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:55:44.072188 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPLw6zZrsiEKn4Yr9a4AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 15:55:47.194075 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPM7Boqed92ItjVUgJRgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:55:47.194233 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPM7Boqed92ItjVUgJRgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 15:55:59.271101 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:55:59.336937 2026] [access_compat:error] [pid 2058769:tid 2058769] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:56:13.378188 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPTS9RbKAccNLF-QE_yAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:56:13.378276 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPTS9RbKAccNLF-QE_yAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 15:56:25.048261 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmPV1QdZ64h20JcCSpGZQAAAAs"] [Sat Feb 21 15:56:25.048391 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmPV1QdZ64h20JcCSpGZQAAAAs"] [Sat Feb 21 15:56:26.085834 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPWcrssm78_TCE3WXMlAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:56:26.085933 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPWcrssm78_TCE3WXMlAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7 [Sat Feb 21 15:56:35.630955 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/error_log [Sat Feb 21 15:56:36.907732 2026] [security2:error] [pid 2012077:tid 2012077] [client 54.204.240.78:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "akcpa.sa"] [uri "/"] [unique_id "aZmPZFQdZ64h20JcCSpGbAAAAAs"], referer: http://akcpa.sa/?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=printenv [Sat Feb 21 15:56:38.962592 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/asalinnovations/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 15:56:44.162695 2026] [authz_core:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 15:56:52.695451 2026] [authz_core:error] [pid 2049075:tid 2049075] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/SimplePie/error_log [Sat Feb 21 15:56:56.943215 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 15:57:00.503290 2026] [authz_core:error] [pid 2029018:tid 2029018] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/Requests/error_log [Sat Feb 21 15:57:05.537567 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPgbBoqed92ItjVUgJagAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:57:05.537712 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPgbBoqed92ItjVUgJagAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 15:57:13.957169 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPia_eqbquRKin0NL0GwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:57:13.957309 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPia_eqbquRKin0NL0GwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:57:19.362482 2026] [authz_core:error] [pid 2049075:tid 2049075] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/block-supports/error_log [Sat Feb 21 15:57:23.230856 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:57:36.445126 2026] [authz_core:error] [pid 2053132:tid 2053132] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/sitemaps/providers/error_log [Sat Feb 21 15:57:37.043986 2026] [authz_core:error] [pid 2039657:tid 2039657] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/block-patterns/error_log [Sat Feb 21 15:57:39.451819 2026] [cgi:error] [pid 2049075:tid 2049075] [client 20.205.120.43:0] AH02812: stderr from /home/roknasateer/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 15:57:43.574904 2026] [security2:error] [pid 2078938:tid 2078938] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPpzSRvv0awrOt-JDw7gAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:57:43.575074 2026] [security2:error] [pid 2078938:tid 2078938] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmPpzSRvv0awrOt-JDw7gAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 15:57:45.344986 2026] [authz_core:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/asalinnovations/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 15:57:51.212128 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-content/uploads/wpcf7_uploads/ [Sat Feb 21 15:58:02.910066 2026] [authz_core:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/html-api/error_log [Sat Feb 21 15:58:04.877626 2026] [authz_core:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 15:58:06.636519 2026] [authz_core:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 15:58:14.287858 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 15:58:26.999117 2026] [authz_core:error] [pid 2039657:tid 2039657] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/asalinnovations/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 15:58:27.677655 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmP01QdZ64h20JcCSpGpwAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:58:27.677749 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmP01QdZ64h20JcCSpGpwAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 15:58:28.929120 2026] [authz_core:error] [pid 2078938:tid 2078938] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/asalinnovations/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 15:58:45.635178 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:59:13.224015 2026] [security2:error] [pid 2078938:tid 2078938] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/wp-includes/class-wp-block-template.php"] [unique_id "aZmQATSRvv0awrOt-JDxHwAAAAE"], referer: binance.com [Sat Feb 21 15:59:13.224073 2026] [security2:error] [pid 2078938:tid 2078938] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/wp-includes/class-wp-block-template.php"] [unique_id "aZmQATSRvv0awrOt-JDxHwAAAAE"], referer: binance.com [Sat Feb 21 15:59:48.450689 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 15:59:50.231905 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQJq_eqbquRKin0NL0cgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 15:59:50.231982 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQJq_eqbquRKin0NL0cgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop5%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 16:00:05.243196 2026] [security2:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/wp-includes/class-wp-theme-json.php"] [unique_id "aZmQNWUHXV9b1ye1wWU09wAAAAM"], referer: binance.com [Sat Feb 21 16:00:05.243346 2026] [security2:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/wp-includes/class-wp-theme-json.php"] [unique_id "aZmQNWUHXV9b1ye1wWU09wAAAAM"], referer: binance.com [Sat Feb 21 16:00:15.532894 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.php [Sat Feb 21 16:00:16.698174 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.php [Sat Feb 21 16:00:16.698815 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.php5 [Sat Feb 21 16:00:16.700027 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/themes/twentytwentytwo/index.phtml [Sat Feb 21 16:00:18.586873 2026] [security2:error] [pid 2081467:tid 2081467] [client 209.38.30.66:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "advertwisely.com"] [uri "/.env"] [unique_id "aZmQQkNk-QfGrUjpm5azfQAAAAk"] [Sat Feb 21 16:00:19.110871 2026] [security2:error] [pid 2049075:tid 2049075] [client 209.38.30.66:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "advertwisely.com"] [uri "/.git/config"] [unique_id "aZmQQ8rssm78_TCE3WXNFAAAAAI"] [Sat Feb 21 16:00:19.336171 2026] [security2:error] [pid 2039657:tid 2039657] [client 209.38.30.66:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "advertwisely.com"] [uri "/"] [unique_id "aZmQQy9RbKAccNLF-QFAVAAAAAc"] [Sat Feb 21 16:00:19.337032 2026] [security2:error] [pid 2081832:tid 2081832] [client 209.38.30.66:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "advertwisely.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmQQ2UHXV9b1ye1wWU1AQAAAAM"] [Sat Feb 21 16:00:44.648428 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmQWw6zZrsiEKn4Yr9bgwAAAAA"] [Sat Feb 21 16:00:44.648563 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmQWw6zZrsiEKn4Yr9bgwAAAAA"] [Sat Feb 21 16:00:56.536345 2026] [security2:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/wp-includes/theme-previews.php"] [unique_id "aZmQaENk-QfGrUjpm5azkwAAAAk"], referer: binance.com [Sat Feb 21 16:00:56.536437 2026] [security2:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/wp-includes/theme-previews.php"] [unique_id "aZmQaENk-QfGrUjpm5azkwAAAAk"], referer: binance.com [Sat Feb 21 16:00:59.180954 2026] [security2:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/wp-includes/theme-templates.php"] [unique_id "aZmQaw6zZrsiEKn4Yr9bjQAAAAA"], referer: binance.com [Sat Feb 21 16:00:59.181015 2026] [security2:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/wp-includes/theme-templates.php"] [unique_id "aZmQaw6zZrsiEKn4Yr9bjQAAAAA"], referer: binance.com [Sat Feb 21 16:01:03.372231 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:01:25.040629 2026] [autoindex:error] [pid 2049075:tid 2049075] [client 52.169.148.186:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 16:01:34.571819 2026] [authz_core:error] [pid 2072461:tid 2072461] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 16:01:36.188542 2026] [authz_core:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 16:01:37.464805 2026] [authz_core:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 16:01:39.115350 2026] [authz_core:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 16:01:53.995427 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 16:01:55.212890 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php [Sat Feb 21 16:01:55.213335 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.php5 [Sat Feb 21 16:01:55.213998 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/index.phtml [Sat Feb 21 16:01:59.008301 2026] [security2:error] [pid 2058141:tid 2058141] [client 52.169.148.186:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmQpbBoqed92ItjVUgKFgAAAAg"] [Sat Feb 21 16:01:59.008395 2026] [security2:error] [pid 2058141:tid 2058141] [client 52.169.148.186:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmQpbBoqed92ItjVUgKFgAAAAg"] [Sat Feb 21 16:02:00.310937 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQqK_eqbquRKin0NL0tgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:02:00.311089 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQqK_eqbquRKin0NL0tgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:02:06.322771 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 52.169.148.186:0] AH01797: client denied by server configuration: /home/arcticairandrefr/public_html/wp-content/plugins/admin.php [Sat Feb 21 16:02:10.390363 2026] [autoindex:error] [pid 2078938:tid 2078938] [client 52.169.148.186:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 16:02:14.052022 2026] [autoindex:error] [pid 2081832:tid 2081832] [client 52.169.148.186:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 16:02:17.907523 2026] [autoindex:error] [pid 2039657:tid 2039657] [client 52.169.148.186:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 16:02:38.751712 2026] [authz_core:error] [pid 2058141:tid 2058141] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 16:02:40.202706 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 16:02:44.432831 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQ1Mrssm78_TCE3WXNaAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:02:44.432935 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQ1Mrssm78_TCE3WXNaAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:02:55.613724 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:02:57.924846 2026] [authz_core:error] [pid 2085180:tid 2085180] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 16:02:59.572058 2026] [authz_core:error] [pid 2049075:tid 2049075] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/rawaealbatin/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 16:03:00.846054 2026] [security2:error] [pid 2049075:tid 2049075] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "aZmQ5Mrssm78_TCE3WXNcAAAAAI"], referer: binance.com [Sat Feb 21 16:03:00.846197 2026] [security2:error] [pid 2049075:tid 2049075] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "aZmQ5Mrssm78_TCE3WXNcAAAAAI"], referer: binance.com [Sat Feb 21 16:03:07.081056 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQ6lD6y5V5h1JF0WByagAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 16:03:07.081134 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmQ6lD6y5V5h1JF0WByagAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 16:03:45.544268 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmREVD6y5V5h1JF0WByfwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 16:03:45.544445 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmREVD6y5V5h1JF0WByfwAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 16:03:50.354656 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRFi9RbKAccNLF-QFAyAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:03:50.354812 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRFi9RbKAccNLF-QFAyAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:03:50.728532 2026] [access_compat:error] [pid 2078938:tid 2078938] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:03:51.907132 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRF8rssm78_TCE3WXNiwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:03:51.907263 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRF8rssm78_TCE3WXNiwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:04:02.238907 2026] [security2:error] [pid 2081832:tid 2081832] [client 207.46.13.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmRIGUHXV9b1ye1wWU1eQAAAAM"] [Sat Feb 21 16:04:02.238988 2026] [security2:error] [pid 2081832:tid 2081832] [client 207.46.13.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmRIGUHXV9b1ye1wWU1eQAAAAM"] [Sat Feb 21 16:04:17.547495 2026] [security2:error] [pid 2085180:tid 2085180] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmRMFD6y5V5h1JF0WByjgAAAAY"] [Sat Feb 21 16:04:17.547571 2026] [security2:error] [pid 2085180:tid 2085180] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmRMFD6y5V5h1JF0WByjgAAAAY"] [Sat Feb 21 16:04:56.240229 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRWFD6y5V5h1JF0WByngAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:04:56.240384 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRWFD6y5V5h1JF0WByngAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:05:03.251956 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:05:08.136145 2026] [security2:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmRYsrssm78_TCE3WXNrgAAAAI"] [Sat Feb 21 16:05:08.136205 2026] [security2:error] [pid 2049075:tid 2049075] [client 20.197.194.128:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmRYsrssm78_TCE3WXNrgAAAAI"] [Sat Feb 21 16:05:21.619177 2026] [autoindex:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sat Feb 21 16:05:24.719890 2026] [autoindex:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01276: Cannot serve directory /home/arcticairandrefr/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sat Feb 21 16:05:37.080153 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 20.197.194.128:0] AH01630: client denied by server configuration: /home/asalinnovations/public_html/wp-includes/SimplePie/error_log [Sat Feb 21 16:05:38.866435 2026] [security2:error] [pid 2048946:tid 2048946] [client 40.77.167.156:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZmRgg6zZrsiEKn4Yr9cIQAAAAA"] [Sat Feb 21 16:05:43.527810 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRhy9RbKAccNLF-QFA_wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 16:05:43.527876 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRhy9RbKAccNLF-QFA_wAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 16:05:49.226903 2026] [security2:error] [pid 2058141:tid 2058141] [client 40.77.167.42:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZmRjbBoqed92ItjVUgKkAAAAAg"] [Sat Feb 21 16:06:05.305837 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:06:16.564824 2026] [authz_core:error] [pid 2039657:tid 2039657] [client 20.194.29.45:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/error_log [Sat Feb 21 16:06:21.657755 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 20.194.29.45:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/SimplePie/error_log [Sat Feb 21 16:06:23.670474 2026] [authz_core:error] [pid 2085180:tid 2085180] [client 20.194.29.45:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/Requests/error_log [Sat Feb 21 16:06:24.227786 2026] [security2:error] [pid 2081467:tid 2081467] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/robots.txt"] [unique_id "aZmRsENk-QfGrUjpm5a0PgAAAAk"] [Sat Feb 21 16:06:24.227856 2026] [security2:error] [pid 2081467:tid 2081467] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/robots.txt"] [unique_id "aZmRsENk-QfGrUjpm5a0PgAAAAk"] [Sat Feb 21 16:06:33.423106 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-global": Permission denied [hostname "redpenguinit.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmRuVQdZ64h20JcCSpHswAAAAs"] [Sat Feb 21 16:06:33.423184 2026] [security2:error] [pid 2012077:tid 2012077] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-ip": Permission denied [hostname "redpenguinit.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmRuVQdZ64h20JcCSpHswAAAAs"] [Sat Feb 21 16:06:33.628150 2026] [cgi:error] [pid 2048946:tid 2048946] [client 20.194.29.45:0] AH02812: stderr from /home/redpenguinit/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 16:06:36.084574 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.194.29.45:0] AH01797: client denied by server configuration: /home/redpenguinit/public_html/wp-content/uploads/wc-logs/ [Sat Feb 21 16:06:36.110141 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.194.29.45:0] AH01797: client denied by server configuration: /home/redpenguinit/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 16:06:44.861555 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:06:44.982252 2026] [security2:error] [pid 2078938:tid 2078938] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRxDSRvv0awrOt-JDyJQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:06:44.982361 2026] [security2:error] [pid 2078938:tid 2078938] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRxDSRvv0awrOt-JDyJQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:06:45.674997 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRxVQdZ64h20JcCSpHvwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:06:45.675061 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRxVQdZ64h20JcCSpHvwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:06:48.815594 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRyK_eqbquRKin0NL1VgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 16:06:48.815705 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmRyK_eqbquRKin0NL1VgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 16:07:30.486400 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmR8q_eqbquRKin0NL1awAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 16:07:30.486496 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmR8q_eqbquRKin0NL1awAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 16:07:40.089984 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:08:42.521165 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:08:42.960425 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSOg6zZrsiEKn4Yr9ckAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 16:08:42.960532 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSOg6zZrsiEKn4Yr9ckAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 16:08:50.247100 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSQlD6y5V5h1JF0WBzHAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:08:50.247242 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSQlD6y5V5h1JF0WBzHAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:09:12.035645 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSVwnBJ1J17V47PDKzvAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop5%2Fsubsystem [Sat Feb 21 16:09:12.035724 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSVwnBJ1J17V47PDKzvAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop5%2Fsubsystem [Sat Feb 21 16:09:15.183410 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSW7Boqed92ItjVUgLAAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:09:15.183510 2026] [security2:error] [pid 2058141:tid 2058141] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSW7Boqed92ItjVUgLAAAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:09:17.351280 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSXa_eqbquRKin0NL1mwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6 [Sat Feb 21 16:09:17.351460 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSXa_eqbquRKin0NL1mwAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6 [Sat Feb 21 16:10:01.207396 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSiS9RbKAccNLF-QFBiQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem [Sat Feb 21 16:10:01.207510 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSiS9RbKAccNLF-QFBiQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fsubsystem%2Floop6%2Fsubsystem [Sat Feb 21 16:10:08.559033 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSkA6zZrsiEKn4Yr9ctgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1 [Sat Feb 21 16:10:08.559182 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSkA6zZrsiEKn4Yr9ctgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda1 [Sat Feb 21 16:10:08.855009 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:10:18.595778 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSmq_eqbquRKin0NL1uAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:10:18.595878 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSmq_eqbquRKin0NL1uAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:10:22.886291 2026] [security2:error] [pid 2081832:tid 2081832] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSnmUHXV9b1ye1wWU2PQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:10:22.886427 2026] [security2:error] [pid 2081832:tid 2081832] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmSnmUHXV9b1ye1wWU2PQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:10:45.235072 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmStVQdZ64h20JcCSpIKAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 16:10:45.235155 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmStVQdZ64h20JcCSpIKAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 16:10:47.903983 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:48.395443 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:48.630058 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:48.865528 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:49.109875 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:49.343698 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:49.907591 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:50.154288 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:50.424921 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:50.662576 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:50.897595 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:51.132240 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:51.399989 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:51.633044 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:51.867717 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:52.188426 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:52.422014 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:52.669924 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:52.902981 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:53.135895 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:53.378597 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:53.611090 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:54.319247 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:54.555683 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:54.788689 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:55.022978 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:55.256826 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:55.492306 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:56.217184 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:56.456567 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:57.241811 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:58.024696 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:58.273065 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:58.520650 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:58.876604 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:59.111591 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:10:59.345802 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:00.616120 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:00.870181 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:01.342629 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:01.580375 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:01.918052 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "mail.brightway.com.pk"] [uri "/wp-content/plugins/index.php"] [unique_id "aZmSxQ6zZrsiEKn4Yr9c1AAAAAA"] [Sat Feb 21 16:11:01.918123 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "mail.brightway.com.pk"] [uri "/wp-content/plugins/index.php"] [unique_id "aZmSxQ6zZrsiEKn4Yr9c1AAAAAA"] [Sat Feb 21 16:11:02.172826 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:02.973704 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:03.208074 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:03.444118 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:03.699122 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:04.422931 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:04.843008 2026] [security2:error] [pid 2012077:tid 2012077] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.247reactionpower.com"] [uri "/api/.env"] [unique_id "aZmSyFQdZ64h20JcCSpIOAAAAAs"] [Sat Feb 21 16:11:06.721114 2026] [security2:error] [pid 2039657:tid 2039657] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.247reactionpower.com"] [uri "/.git/config"] [unique_id "aZmSyi9RbKAccNLF-QFBrwAAAAc"] [Sat Feb 21 16:11:08.451602 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:09.168832 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:10.018614 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:11.101949 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:11:11.288906 2026] [security2:error] [pid 2072461:tid 2072461] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "dashboard.247reactionpower.com"] [uri "/.env"] [unique_id "aZmSz6_eqbquRKin0NL12AAAAAQ"] [Sat Feb 21 16:11:11.740551 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:12.988137 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:13.221745 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:13.463404 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:14.226448 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:14.461193 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:14.695776 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:14.934324 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:15.174891 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:15.419739 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:15.655770 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:15.906644 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:16.142812 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:16.379165 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:16.614302 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:16.856603 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:17.091119 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:17.325260 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:17.560307 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:17.925994 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:18.161328 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:18.395583 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:18.649281 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:19.187398 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:19.420859 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:19.421380 2026] [security2:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "mail.brightway.com.pk"] [uri "/file48.php"] [unique_id "aZmS12UHXV9b1ye1wWU2YQAAAAM"] [Sat Feb 21 16:11:19.421409 2026] [security2:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "mail.brightway.com.pk"] [uri "/file48.php"] [unique_id "aZmS12UHXV9b1ye1wWU2YQAAAAM"] [Sat Feb 21 16:11:19.654751 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:19.889806 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:20.142312 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:20.376537 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:20.637991 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:20.872379 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:21.124674 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:21.357727 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:21.591972 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:21.834403 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:22.069614 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:22.307264 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:22.547366 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:22.781059 2026] [proxy_fcgi:error] [pid 2039657:tid 2039657] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:23.014406 2026] [proxy_fcgi:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:23.374246 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:23.606821 2026] [proxy_fcgi:error] [pid 2072461:tid 2072461] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:23.840842 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:24.090386 2026] [proxy_fcgi:error] [pid 2049075:tid 2049075] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:24.334808 2026] [proxy_fcgi:error] [pid 2081832:tid 2081832] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:24.568826 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:24.805172 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.214.157.214:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:11:52.028154 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmS96_eqbquRKin0NL17gAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:11:52.028224 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmS96_eqbquRKin0NL17gAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:12:38.099213 2026] [access_compat:error] [pid 2085180:tid 2085180] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:12:38.169367 2026] [security2:error] [pid 2048946:tid 2048946] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/robots.txt"] [unique_id "aZmTJg6zZrsiEKn4Yr9dCQAAAAA"] [Sat Feb 21 16:12:38.169431 2026] [security2:error] [pid 2048946:tid 2048946] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/robots.txt"] [unique_id "aZmTJg6zZrsiEKn4Yr9dCQAAAAA"] [Sat Feb 21 16:12:46.061289 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTLQnBJ1J17V47PDK0LAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 16:12:46.061406 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTLQnBJ1J17V47PDK0LAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 16:12:47.658378 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 49.75.219.14:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:12:55.645105 2026] [security2:error] [pid 2012077:tid 2012077] [client 34.51.150.45:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "des-pvt.com"] [uri "/.env"] [unique_id "aZmTN1QdZ64h20JcCSpIcAAAAAs"] [Sat Feb 21 16:12:55.986763 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTN8rssm78_TCE3WXOqAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 16:12:55.986823 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTN8rssm78_TCE3WXOqAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 16:13:00.751469 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 31.129.147.102:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:13:08.118092 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 66.249.79.64:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/ [Sat Feb 21 16:13:18.415513 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/redpenguinit/public_html/wp-content/uploads/wc-logs/, referer: binance.com [Sat Feb 21 16:13:18.417670 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/redpenguinit/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 16:13:19.759263 2026] [authz_core:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 16:13:21.867474 2026] [authz_core:error] [pid 2081832:tid 2081832] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-admin/maint/error_log, referer: binance.com [Sat Feb 21 16:13:32.147042 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 16:13:34.683628 2026] [authz_core:error] [pid 2012077:tid 2012077] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 16:13:35.585728 2026] [authz_core:error] [pid 2087455:tid 2087455] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 16:13:36.160957 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 81.177.48.54:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:13:39.991425 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTYy9RbKAccNLF-QFCAQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 16:13:39.991546 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTYy9RbKAccNLF-QFCAQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 16:13:41.373305 2026] [security2:error] [pid 2072461:tid 2072461] [client 92.249.227.144:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js"] [unique_id "aZmTZa_eqbquRKin0NL2LAAAAAQ"], referer: https://medimen.ca/ [Sat Feb 21 16:13:41.373374 2026] [security2:error] [pid 2072461:tid 2072461] [client 92.249.227.144:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js"] [unique_id "aZmTZa_eqbquRKin0NL2LAAAAAQ"], referer: https://medimen.ca/ [Sat Feb 21 16:13:51.107293 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:14:02.394228 2026] [security2:error] [pid 2072461:tid 2072461] [client 157.55.39.205:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmTeK_eqbquRKin0NL2OQAAAAQ"] [Sat Feb 21 16:14:02.394341 2026] [security2:error] [pid 2072461:tid 2072461] [client 157.55.39.205:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmTeK_eqbquRKin0NL2OQAAAAQ"] [Sat Feb 21 16:14:04.784882 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:14:05.615332 2026] [security2:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-global": Permission denied [hostname "redpenguinit.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmTfUNk-QfGrUjpm5a1OwAAAAk"], referer: binance.com [Sat Feb 21 16:14:05.615452 2026] [security2:error] [pid 2081467:tid 2081467] [client 84.247.188.147:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-ip": Permission denied [hostname "redpenguinit.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmTfUNk-QfGrUjpm5a1OwAAAAk"], referer: binance.com [Sat Feb 21 16:14:06.266820 2026] [authz_core:error] [pid 2048946:tid 2048946] [client 84.247.188.147:0] AH01630: client denied by server configuration: /home/redpenguinit/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 16:14:07.624535 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTfwnBJ1J17V47PDK0YwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 16:14:07.624672 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTfwnBJ1J17V47PDK0YwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 16:14:18.300418 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 98.181.137.80:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:14:21.737464 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 98.178.72.30:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:14:28.241487 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTlAnBJ1J17V47PDK0bAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 16:14:28.241630 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTlAnBJ1J17V47PDK0bAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 16:14:46.646800 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 70.166.167.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:14:51.549003 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 68.71.243.14:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:14:52.841374 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:14:53.925535 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTrQnBJ1J17V47PDK0dwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0 [Sat Feb 21 16:14:53.925600 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTrQnBJ1J17V47PDK0dwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0 [Sat Feb 21 16:14:55.427057 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTr1QdZ64h20JcCSpItgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:14:55.427155 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTr1QdZ64h20JcCSpItgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:14:57.884400 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 72.56.59.17:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:15:02.186455 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 98.188.47.132:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:15:02.279131 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTtsrssm78_TCE3WXO9AAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 16:15:02.279226 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTtsrssm78_TCE3WXO9AAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 16:15:07.091379 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTuq_eqbquRKin0NL2WAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop3 [Sat Feb 21 16:15:07.091495 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTuq_eqbquRKin0NL2WAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop3 [Sat Feb 21 16:15:12.867523 2026] [security2:error] [pid 2081832:tid 2081832] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTwGUHXV9b1ye1wWU22QAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2 [Sat Feb 21 16:15:12.867611 2026] [security2:error] [pid 2081832:tid 2081832] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmTwGUHXV9b1ye1wWU22QAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2 [Sat Feb 21 16:15:13.261087 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 104.238.30.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:15:30.538813 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 112.37.125.13:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:15:34.311400 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmT1g6zZrsiEKn4Yr9dZQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop2 [Sat Feb 21 16:15:34.311509 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmT1g6zZrsiEKn4Yr9dZQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop2 [Sat Feb 21 16:15:39.194252 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmT2w6zZrsiEKn4Yr9dZwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:15:39.194321 2026] [security2:error] [pid 2048946:tid 2048946] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmT2w6zZrsiEKn4Yr9dZwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:15:41.748718 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 67.201.33.10:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:15:54.659953 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:15:55.647400 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 85.187.224.21:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:15:56.274095 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/surf/public_html/wp-content/uploads/wc-logs/, referer: binance.com [Sat Feb 21 16:15:56.282014 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 84.247.188.147:0] AH01797: client denied by server configuration: /home/surf/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 16:16:05.052451 2026] [access_compat:error] [pid 2085180:tid 2085180] [client 68.71.243.14:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:16:10.003414 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:11.562708 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:12.999866 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:17.470573 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:18.963184 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:20.790749 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:20.880949 2026] [access_compat:error] [pid 2085180:tid 2085180] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:22.445833 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:24.097377 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:25.656603 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:26.508219 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:27.684315 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:16:29.313954 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:30.918584 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:31.277699 2026] [access_compat:error] [pid 2085180:tid 2085180] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:32.655409 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:34.698540 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:36.079838 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:36.387235 2026] [access_compat:error] [pid 2085180:tid 2085180] [client 104.238.30.40:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:46.318699 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 104.238.30.38:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:16:54.043609 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUJa_eqbquRKin0NL2jAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem [Sat Feb 21 16:16:54.043727 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUJa_eqbquRKin0NL2jAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem [Sat Feb 21 16:16:58.171064 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 31.217.165.194:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/xmlrpc.php [Sat Feb 21 16:16:59.934924 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUKy9RbKAccNLF-QFCaAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda3 [Sat Feb 21 16:16:59.935008 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUKy9RbKAccNLF-QFCaAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Fsda3 [Sat Feb 21 16:17:38.983679 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:17:43.279946 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUVwnBJ1J17V47PDK0wgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 16:17:43.280071 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUVwnBJ1J17V47PDK0wgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 16:17:50.869060 2026] [security2:error] [pid 2081467:tid 2081467] [client 52.167.144.171:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmUXUNk-QfGrUjpm5a1pAAAAAk"] [Sat Feb 21 16:17:50.869189 2026] [security2:error] [pid 2081467:tid 2081467] [client 52.167.144.171:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmUXUNk-QfGrUjpm5a1pAAAAAk"] [Sat Feb 21 16:17:50.982426 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/wsd.php"] [unique_id "aZmUXg6zZrsiEKn4Yr9dnwAAAAA"] [Sat Feb 21 16:17:50.982531 2026] [security2:error] [pid 2048946:tid 2048946] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/wsd.php"] [unique_id "aZmUXg6zZrsiEKn4Yr9dnwAAAAA"] [Sat Feb 21 16:17:51.191209 2026] [security2:error] [pid 2058141:tid 2058141] [client 103.61.123.221:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "master-comm.net"] [uri "/.env"] [unique_id "aZmUX7Boqed92ItjVUgMBwAAAAg"] [Sat Feb 21 16:17:51.191822 2026] [security2:error] [pid 2081832:tid 2081832] [client 103.61.123.221:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "master-comm.net"] [uri "/config/.env"] [unique_id "aZmUX2UHXV9b1ye1wWU3IwAAAAM"] [Sat Feb 21 16:17:52.287337 2026] [security2:error] [pid 2085180:tid 2085180] [client 103.61.123.221:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "master-comm.net"] [uri "/config/.env"] [unique_id "aZmUYFD6y5V5h1JF0WB0KwAAAAY"] [Sat Feb 21 16:17:52.325342 2026] [security2:error] [pid 2072461:tid 2072461] [client 103.61.123.221:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "master-comm.net"] [uri "/.env"] [unique_id "aZmUYK_eqbquRKin0NL2qQAAAAQ"] [Sat Feb 21 16:18:12.313659 2026] [security2:error] [pid 2081832:tid 2081832] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUdGUHXV9b1ye1wWU3NAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:18:12.313739 2026] [security2:error] [pid 2081832:tid 2081832] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUdGUHXV9b1ye1wWU3NAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:18:14.326102 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUdlQdZ64h20JcCSpJGQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:18:14.326222 2026] [security2:error] [pid 2012077:tid 2012077] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUdlQdZ64h20JcCSpJGQAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:18:32.532871 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUiC9RbKAccNLF-QFCnwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:18:32.532971 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmUiC9RbKAccNLF-QFCnwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 16:18:44.375824 2026] [access_compat:error] [pid 2081832:tid 2081832] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:18:45.607965 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:18:50.126177 2026] [security2:error] [pid 2048946:tid 2048946] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ahk.com.pk"] [uri "/.env"] [unique_id "aZmUmg6zZrsiEKn4Yr9dxQAAAAA"] [Sat Feb 21 16:18:50.676293 2026] [security2:error] [pid 2039657:tid 2039657] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "ahk.com.pk"] [uri "/.git/config"] [unique_id "aZmUmi9RbKAccNLF-QFCrwAAAAc"] [Sat Feb 21 16:18:50.966943 2026] [security2:error] [pid 2012077:tid 2012077] [client 170.64.224.147:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "ahk.com.pk"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmUmlQdZ64h20JcCSpJNwAAAAs"] [Sat Feb 21 16:18:50.967094 2026] [security2:error] [pid 2049075:tid 2049075] [client 170.64.224.147:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "ahk.com.pk"] [uri "/"] [unique_id "aZmUmsrssm78_TCE3WXPcwAAAAI"] [Sat Feb 21 16:18:51.658632 2026] [security2:error] [pid 2081467:tid 2081467] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../css/gm.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php"] [unique_id "aZmUm0Nk-QfGrUjpm5a11QAAAAk"] [Sat Feb 21 16:18:51.658789 2026] [security2:error] [pid 2081467:tid 2081467] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxaction=getids&cfg=../css/gm.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php"] [unique_id "aZmUm0Nk-QfGrUjpm5a11QAAAAk"] [Sat Feb 21 16:18:51.997187 2026] [security2:error] [pid 2012077:tid 2012077] [client 170.64.224.147:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmUm1QdZ64h20JcCSpJOQAAAAs"] [Sat Feb 21 16:18:51.997350 2026] [security2:error] [pid 2012077:tid 2012077] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmUm1QdZ64h20JcCSpJOQAAAAs"] [Sat Feb 21 16:18:51.997449 2026] [security2:error] [pid 2012077:tid 2012077] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmUm1QdZ64h20JcCSpJOQAAAAs"] [Sat Feb 21 16:18:52.009578 2026] [security2:error] [pid 2081467:tid 2081467] [client 170.64.224.147:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmUnENk-QfGrUjpm5a11gAAAAk"] [Sat Feb 21 16:18:52.009678 2026] [security2:error] [pid 2081467:tid 2081467] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmUnENk-QfGrUjpm5a11gAAAAk"] [Sat Feb 21 16:18:52.009759 2026] [security2:error] [pid 2081467:tid 2081467] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmUnENk-QfGrUjpm5a11gAAAAk"] [Sat Feb 21 16:18:52.010222 2026] [security2:error] [pid 2081832:tid 2081832] [client 170.64.224.147:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmUnGUHXV9b1ye1wWU3VAAAAAM"] [Sat Feb 21 16:18:52.010331 2026] [security2:error] [pid 2081832:tid 2081832] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmUnGUHXV9b1ye1wWU3VAAAAAM"] [Sat Feb 21 16:18:52.010421 2026] [security2:error] [pid 2081832:tid 2081832] [client 170.64.224.147:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "ahk.com.pk"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmUnGUHXV9b1ye1wWU3VAAAAAM"] [Sat Feb 21 16:19:23.680789 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:19:33.923535 2026] [security2:error] [pid 2085180:tid 2085180] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "www.science-on-stage.sk"] [uri "/index.php"] [unique_id "aZmUxVD6y5V5h1JF0WB0dQAAAAY"] [Sat Feb 21 16:19:33.923649 2026] [security2:error] [pid 2085180:tid 2085180] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "www.science-on-stage.sk"] [uri "/index.php"] [unique_id "aZmUxVD6y5V5h1JF0WB0dQAAAAY"] [Sat Feb 21 16:19:35.693455 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:19:40.594700 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 5.255.117.127:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:19:46.682916 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmU0i9RbKAccNLF-QFC1AAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 16:19:46.682981 2026] [security2:error] [pid 2039657:tid 2039657] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmU0i9RbKAccNLF-QFC1AAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 16:20:00.363930 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmU4FD6y5V5h1JF0WB0hAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:20:00.364067 2026] [security2:error] [pid 2085180:tid 2085180] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmU4FD6y5V5h1JF0WB0hAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:20:07.164429 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 72.195.34.42:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:20:08.676803 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:20:15.838967 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmU76_eqbquRKin0NL3DgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 16:20:15.839070 2026] [security2:error] [pid 2072461:tid 2072461] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmU76_eqbquRKin0NL3DgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 16:20:18.940915 2026] [security2:error] [pid 2049075:tid 2049075] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.git/config"] [unique_id "aZmU8srssm78_TCE3WXPtgAAAAI"] [Sat Feb 21 16:20:18.941174 2026] [security2:error] [pid 2048946:tid 2048946] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.git/config"] [unique_id "aZmU8g6zZrsiEKn4Yr9eAwAAAAA"] [Sat Feb 21 16:20:38.893912 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 120.219.171.57:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:20:39.118648 2026] [security2:error] [pid 2058141:tid 2058141] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env"] [unique_id "aZmVB7Boqed92ItjVUgMeAAAAAg"] [Sat Feb 21 16:20:39.423138 2026] [security2:error] [pid 2087455:tid 2087455] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env"] [unique_id "aZmVBwnBJ1J17V47PDK1NQAAAAU"] [Sat Feb 21 16:20:39.683307 2026] [security2:error] [pid 2039657:tid 2039657] [client 77.83.39.170:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.haq.rentacarkarachi.com"] [uri "/pms"] [unique_id "aZmVBy9RbKAccNLF-QFC9wAAAAc"] [Sat Feb 21 16:20:39.683423 2026] [security2:error] [pid 2039657:tid 2039657] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.haq.rentacarkarachi.com"] [uri "/pms"] [unique_id "aZmVBy9RbKAccNLF-QFC9wAAAAc"] [Sat Feb 21 16:20:39.683426 2026] [access_compat:error] [pid 2085180:tid 2085180] [client 77.83.39.170:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/haq.rentacarkarachi.com/_phpinfo.php [Sat Feb 21 16:20:39.683480 2026] [security2:error] [pid 2039657:tid 2039657] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.haq.rentacarkarachi.com"] [uri "/pms"] [unique_id "aZmVBy9RbKAccNLF-QFC9wAAAAc"] [Sat Feb 21 16:20:39.992864 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 77.83.39.170:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/haq.rentacarkarachi.com/info.php [Sat Feb 21 16:20:40.051504 2026] [security2:error] [pid 2085180:tid 2085180] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.prod"] [unique_id "aZmVCFD6y5V5h1JF0WB0nQAAAAY"] [Sat Feb 21 16:20:40.087914 2026] [security2:error] [pid 2039657:tid 2039657] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.bak"] [unique_id "aZmVCC9RbKAccNLF-QFC-AAAAAc"] [Sat Feb 21 16:20:45.627878 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 68.71.240.210:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:20:46.933586 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVDsrssm78_TCE3WXPyAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:20:46.933715 2026] [security2:error] [pid 2049075:tid 2049075] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVDsrssm78_TCE3WXPyAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:20:59.224403 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:21:02.471301 2026] [security2:error] [pid 2049075:tid 2049075] [client 77.83.39.170:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.haq.rentacarkarachi.com"] [uri "/pms"] [unique_id "aZmVHsrssm78_TCE3WXP0QAAAAI"] [Sat Feb 21 16:21:02.471442 2026] [security2:error] [pid 2049075:tid 2049075] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.haq.rentacarkarachi.com"] [uri "/pms"] [unique_id "aZmVHsrssm78_TCE3WXP0QAAAAI"] [Sat Feb 21 16:21:02.471564 2026] [security2:error] [pid 2049075:tid 2049075] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.haq.rentacarkarachi.com"] [uri "/pms"] [unique_id "aZmVHsrssm78_TCE3WXP0QAAAAI"] [Sat Feb 21 16:21:02.477816 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 77.83.39.170:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/haq.rentacarkarachi.com/_phpinfo.php [Sat Feb 21 16:21:02.481930 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 77.83.39.170:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/haq.rentacarkarachi.com/info.php [Sat Feb 21 16:21:03.091639 2026] [security2:error] [pid 2049075:tid 2049075] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.prod"] [unique_id "aZmVH8rssm78_TCE3WXP0gAAAAI"] [Sat Feb 21 16:21:03.223252 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:21:03.339050 2026] [security2:error] [pid 2048946:tid 2048946] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.live"] [unique_id "aZmVHw6zZrsiEKn4Yr9eHwAAAAA"] [Sat Feb 21 16:21:03.378489 2026] [security2:error] [pid 2012077:tid 2012077] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.bak"] [unique_id "aZmVH1QdZ64h20JcCSpJjgAAAAs"] [Sat Feb 21 16:21:03.385502 2026] [security2:error] [pid 2093830:tid 2093830] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.production"] [unique_id "aZmVHyayrk5v_v1pHET_bwAAAAM"] [Sat Feb 21 16:21:03.390466 2026] [security2:error] [pid 2072461:tid 2072461] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/crm/.env"] [unique_id "aZmVH6_eqbquRKin0NL3LQAAAAQ"] [Sat Feb 21 16:21:03.542755 2026] [security2:error] [pid 2087455:tid 2087455] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/awstats/.env"] [unique_id "aZmVHwnBJ1J17V47PDK1RAAAAAU"] [Sat Feb 21 16:21:05.840090 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:21:09.817405 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:21:10.549800 2026] [cgi:error] [pid 2049075:tid 2049075] [client 4.232.89.175:0] AH02812: stderr from /home/scienceonstage/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 16:21:12.560505 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:21:12.728456 2026] [security2:error] [pid 2087455:tid 2087455] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmVKAnBJ1J17V47PDK1SQAAAAU"] [Sat Feb 21 16:21:12.728531 2026] [security2:error] [pid 2087455:tid 2087455] [client 66.249.68.6:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmVKAnBJ1J17V47PDK1SQAAAAU"] [Sat Feb 21 16:21:13.733954 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:21:14.985357 2026] [security2:error] [pid 2081467:tid 2081467] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmVKUNk-QfGrUjpm5a2NwAAAAk"] [Sat Feb 21 16:21:14.985482 2026] [security2:error] [pid 2081467:tid 2081467] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmVKUNk-QfGrUjpm5a2NwAAAAk"] [Sat Feb 21 16:21:17.924009 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:21:20.376078 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:21:25.982307 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:21:28.372490 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:21:30.374060 2026] [security2:error] [pid 2012077:tid 2012077] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.live"] [unique_id "aZmVOlQdZ64h20JcCSpJoAAAAAs"] [Sat Feb 21 16:21:30.558099 2026] [security2:error] [pid 2085180:tid 2085180] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "science-on-stage.sk"] [uri "/index.php"] [unique_id "aZmVOlD6y5V5h1JF0WB0vQAAAAY"] [Sat Feb 21 16:21:30.558202 2026] [security2:error] [pid 2085180:tid 2085180] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "science-on-stage.sk"] [uri "/index.php"] [unique_id "aZmVOlD6y5V5h1JF0WB0vQAAAAY"] [Sat Feb 21 16:21:30.634176 2026] [access_compat:error] [pid 2039657:tid 2039657] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:21:30.906229 2026] [security2:error] [pid 2058141:tid 2058141] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/crm/.env"] [unique_id "aZmVOrBoqed92ItjVUgMmQAAAAg"] [Sat Feb 21 16:21:30.909739 2026] [security2:error] [pid 2072461:tid 2072461] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/.env.production"] [unique_id "aZmVOq_eqbquRKin0NL3PgAAAAQ"] [Sat Feb 21 16:21:35.465809 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 211.230.49.122:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 16:21:37.578544 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/goods.php [Sat Feb 21 16:21:37.722183 2026] [security2:error] [pid 2093830:tid 2093830] [client 45.78.226.62:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-global": Permission denied [hostname "medimage.com.pk"] [uri "/index.php"] [unique_id "aZmVPyayrk5v_v1pHET_gwAAAAM"] [Sat Feb 21 16:21:37.722296 2026] [security2:error] [pid 2093830:tid 2093830] [client 45.78.226.62:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-ip": Permission denied [hostname "medimage.com.pk"] [uri "/index.php"] [unique_id "aZmVPyayrk5v_v1pHET_gwAAAAM"] [Sat Feb 21 16:21:38.987497 2026] [security2:error] [pid 2093962:tid 2093962] [client 216.73.163.151:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/wp-login.php"] [unique_id "aZmVQclqhQ3szjhhYJUL0wAAAAo"] [Sat Feb 21 16:21:38.987610 2026] [security2:error] [pid 2093962:tid 2093962] [client 216.73.163.151:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/wp-login.php"] [unique_id "aZmVQclqhQ3szjhhYJUL0wAAAAo"] [Sat Feb 21 16:21:40.982832 2026] [proxy_fcgi:error] [pid 2058141:tid 2058141] [client 20.205.120.43:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:21:44.621535 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/setup-config.php [Sat Feb 21 16:21:45.798905 2026] [security2:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmVSK_eqbquRKin0NL3SAAAAAQ"] [Sat Feb 21 16:21:45.798988 2026] [security2:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmVSK_eqbquRKin0NL3SAAAAAQ"] [Sat Feb 21 16:21:46.395264 2026] [access_compat:error] [pid 2081467:tid 2081467] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/file.php [Sat Feb 21 16:21:47.859690 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:21:48.216974 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/edit.php [Sat Feb 21 16:21:49.966488 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/file5.php [Sat Feb 21 16:21:51.700478 2026] [proxy_fcgi:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:21:52.842313 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block.php [Sat Feb 21 16:21:52.842456 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-network.php [Sat Feb 21 16:21:52.842559 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class.wp-dependencies.php [Sat Feb 21 16:21:52.842614 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-recovery-mode.php [Sat Feb 21 16:21:52.842652 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-theme.php [Sat Feb 21 16:21:52.842716 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-http.php [Sat Feb 21 16:21:52.842751 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/widgets.php [Sat Feb 21 16:21:52.842790 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-comment.php [Sat Feb 21 16:21:52.842828 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/robots-template.php [Sat Feb 21 16:21:52.842904 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-text-diff-renderer-inline.php [Sat Feb 21 16:21:52.842940 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/rest-api.php [Sat Feb 21 16:21:52.842974 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/compat-utf8.php [Sat Feb 21 16:21:52.843020 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-application-passwords.php [Sat Feb 21 16:21:52.843069 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-patterns-registry.php [Sat Feb 21 16:21:52.843102 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/canonical.php [Sat Feb 21 16:21:52.843137 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/link-template.php [Sat Feb 21 16:21:52.843175 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/speculative-loading.php [Sat Feb 21 16:21:52.843206 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/nav-menu.php [Sat Feb 21 16:21:52.843234 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/query.php [Sat Feb 21 16:21:52.843280 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/compat.php [Sat Feb 21 16:21:52.843323 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/media.php [Sat Feb 21 16:21:52.843360 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-rewrite.php [Sat Feb 21 16:21:52.843431 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/spl-autoload-compat.php [Sat Feb 21 16:21:52.843472 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/block-template-utils.php [Sat Feb 21 16:21:52.843533 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-feed-cache.php [Sat Feb 21 16:21:52.843565 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/option.php [Sat Feb 21 16:21:52.843603 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-user-query.php [Sat Feb 21 16:21:52.843641 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-tax-query.php [Sat Feb 21 16:21:52.843686 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-plugin-dependencies.php [Sat Feb 21 16:21:52.843719 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/post-formats.php [Sat Feb 21 16:21:52.843750 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/taxonomy.php [Sat Feb 21 16:21:52.843792 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-oembed-controller.php [Sat Feb 21 16:21:52.843840 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-supports.php [Sat Feb 21 16:21:52.843896 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-phpass.php [Sat Feb 21 16:21:52.843926 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/fonts.php [Sat Feb 21 16:21:52.843985 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-snoopy.php [Sat Feb 21 16:21:52.848007 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/locale.php [Sat Feb 21 16:21:52.848096 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-recovery-mode-cookie-service.php [Sat Feb 21 16:21:52.848128 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/version.php [Sat Feb 21 16:21:52.848192 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-widget-factory.php [Sat Feb 21 16:21:52.848223 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/formatting.php [Sat Feb 21 16:21:52.848288 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/default-filters.php [Sat Feb 21 16:21:52.850885 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-metadata-lazyloader.php [Sat Feb 21 16:21:52.851013 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-theme-json-schema.php [Sat Feb 21 16:21:52.851091 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-widgets.php [Sat Feb 21 16:21:52.851133 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-walker-page-dropdown.php [Sat Feb 21 16:21:52.851170 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/rss.php [Sat Feb 21 16:21:52.851215 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-image-editor.php [Sat Feb 21 16:21:52.851262 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-blogs.php [Sat Feb 21 16:21:52.851343 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-editor-context.php [Sat Feb 21 16:21:52.851376 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/theme-previews.php [Sat Feb 21 16:21:52.851402 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/theme.php [Sat Feb 21 16:21:52.851443 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/media-template.php [Sat Feb 21 16:21:52.851487 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-textdomain-registry.php [Sat Feb 21 16:21:52.851514 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/kses.php [Sat Feb 21 16:21:52.851543 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/author-template.php [Sat Feb 21 16:21:52.851571 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/sitemaps.php [Sat Feb 21 16:21:52.851619 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/functions.wp-scripts.php [Sat Feb 21 16:21:52.851651 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-oembed.php [Sat Feb 21 16:21:52.851690 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-parser.php [Sat Feb 21 16:21:52.851725 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/theme-templates.php [Sat Feb 21 16:21:52.851765 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-parser-frame.php [Sat Feb 21 16:21:52.851790 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-embed.php [Sat Feb 21 16:21:52.851806 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/l10n.php [Sat Feb 21 16:21:52.851826 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-dependency.php [Sat Feb 21 16:21:52.856097 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-pop3.php [Sat Feb 21 16:21:52.856809 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-classic-to-block-menu-converter.php [Sat Feb 21 16:21:52.859293 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-theme-json-data.php [Sat Feb 21 16:21:52.859336 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/load.php [Sat Feb 21 16:21:52.861291 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-simplepie.php [Sat Feb 21 16:21:52.861358 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/default-widgets.php [Sat Feb 21 16:21:52.863662 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-feed-cache-transient.php [Sat Feb 21 16:21:52.863704 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/category.php [Sat Feb 21 16:21:52.863725 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wpdb.php [Sat Feb 21 16:21:52.863742 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/rewrite.php [Sat Feb 21 16:21:52.863758 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/http.php [Sat Feb 21 16:21:52.863803 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-locale.php [Sat Feb 21 16:21:52.863824 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-walker-comment.php [Sat Feb 21 16:21:52.863858 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed-rss2.php [Sat Feb 21 16:21:52.863877 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/blocks.php [Sat Feb 21 16:21:52.866166 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/abilities.php [Sat Feb 21 16:21:52.866296 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/default-constants.php [Sat Feb 21 16:21:52.866339 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/plugin.php [Sat Feb 21 16:21:52.866408 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-simplepie-file.php [Sat Feb 21 16:21:52.866436 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/atomlib.php [Sat Feb 21 16:21:52.866461 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/rss-functions.php [Sat Feb 21 16:21:52.866483 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-proxy.php [Sat Feb 21 16:21:52.867684 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/block-bindings.php [Sat Feb 21 16:21:52.867712 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/post.php [Sat Feb 21 16:21:52.867742 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-json.php [Sat Feb 21 16:21:52.867764 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-load.php [Sat Feb 21 16:21:52.867781 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/update.php [Sat Feb 21 16:21:52.867804 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/embed-template.php [Sat Feb 21 16:21:52.867823 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/block-template.php [Sat Feb 21 16:21:52.867859 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-query.php [Sat Feb 21 16:21:52.867881 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/post-thumbnail-template.php [Sat Feb 21 16:21:52.867925 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-smtp.php [Sat Feb 21 16:21:52.867976 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-matchesmapregex.php [Sat Feb 21 16:21:52.868004 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-widget.php [Sat Feb 21 16:21:52.868030 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-requests-response.php [Sat Feb 21 16:21:52.868059 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/registration-functions.php [Sat Feb 21 16:21:52.870798 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-taxonomy.php [Sat Feb 21 16:21:52.870851 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-list.php [Sat Feb 21 16:21:52.870890 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class.wp-styles.php [Sat Feb 21 16:21:52.870926 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-text-diff-renderer-table.php [Sat Feb 21 16:21:52.873120 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-walker-category.php [Sat Feb 21 16:21:52.873191 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/bookmark-template.php [Sat Feb 21 16:21:52.873266 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/capabilities.php [Sat Feb 21 16:21:52.873298 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/template.php [Sat Feb 21 16:21:52.873344 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-avif-info.php [Sat Feb 21 16:21:52.873379 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-navigation-fallback.php [Sat Feb 21 16:21:52.873434 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed-atom.php [Sat Feb 21 16:21:52.873469 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pluggable-deprecated.php [Sat Feb 21 16:21:52.873512 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-settings.php [Sat Feb 21 16:21:52.873537 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed-atom-comments.php [Sat Feb 21 16:21:52.873564 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-recovery-mode-email-service.php [Sat Feb 21 16:21:52.873583 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-scripts.php [Sat Feb 21 16:21:52.873601 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-role.php [Sat Feb 21 16:21:52.873619 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-post.php [Sat Feb 21 16:21:52.875878 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-templates-registry.php [Sat Feb 21 16:21:52.875926 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-meta-query.php [Sat Feb 21 16:21:52.875948 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/script-loader.php [Sat Feb 21 16:21:52.875969 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-list-util.php [Sat Feb 21 16:21:52.876041 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-bindings-registry.php [Sat Feb 21 16:21:52.876068 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-recovery-mode-key-service.php [Sat Feb 21 16:21:52.876108 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-image-editor-imagick.php [Sat Feb 21 16:21:52.876572 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/wp-diff.php [Sat Feb 21 16:21:52.878314 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/revision.php [Sat Feb 21 16:21:52.878349 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed-rdf.php [Sat Feb 21 16:21:52.878381 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-requests.php [Sat Feb 21 16:21:52.878421 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-dependencies.php [Sat Feb 21 16:21:52.878476 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-term.php [Sat Feb 21 16:21:52.879618 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/registration.php [Sat Feb 21 16:21:52.879651 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-locale-switcher.php [Sat Feb 21 16:21:52.879677 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-type-registry.php [Sat Feb 21 16:21:52.879708 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-control.php [Sat Feb 21 16:21:52.879729 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-post-type.php [Sat Feb 21 16:21:52.879747 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/cache-compat.php [Sat Feb 21 16:21:52.879764 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/shortcodes.php [Sat Feb 21 16:21:52.879802 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-network-query.php [Sat Feb 21 16:21:52.881072 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-simplepie-sanitize-kses.php [Sat Feb 21 16:21:52.881127 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-styles-registry.php [Sat Feb 21 16:21:52.881146 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/bookmark.php [Sat Feb 21 16:21:52.881161 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/embed.php [Sat Feb 21 16:21:52.881182 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-admin-bar.php [Sat Feb 21 16:21:52.881200 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/https-migration.php [Sat Feb 21 16:21:52.881237 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/cache.php [Sat Feb 21 16:21:52.881273 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/block-editor.php [Sat Feb 21 16:21:52.881293 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-walker.php [Sat Feb 21 16:21:52.881320 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/utf8.php [Sat Feb 21 16:21:52.881368 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-phpmailer.php [Sat Feb 21 16:21:52.881387 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp.php [Sat Feb 21 16:21:52.881412 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-panel.php [Sat Feb 21 16:21:52.881436 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-functions.php [Sat Feb 21 16:21:52.881457 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-template.php [Sat Feb 21 16:21:52.881479 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/button-form.php [Sat Feb 21 16:21:52.881507 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-nav-menus.php [Sat Feb 21 16:21:52.882665 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-metadata-registry.php [Sat Feb 21 16:21:52.882746 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-default-filters.php [Sat Feb 21 16:21:52.882777 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-session-tokens.php [Sat Feb 21 16:21:52.882805 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed-rss2-comments.php [Sat Feb 21 16:21:52.882826 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/post-template.php [Sat Feb 21 16:21:52.882847 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-ajax-response.php [Sat Feb 21 16:21:52.882880 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/session.php [Sat Feb 21 16:21:52.884863 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/style-engine.php [Sat Feb 21 16:21:52.884899 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-walker-page.php [Sat Feb 21 16:21:52.884955 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-phpmailer.php [Sat Feb 21 16:21:52.884995 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-image-editor-gd.php [Sat Feb 21 16:21:52.885037 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-recovery-mode-link-service.php [Sat Feb 21 16:21:52.886196 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-streams.php [Sat Feb 21 16:21:52.886227 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-styles.php [Sat Feb 21 16:21:52.886262 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-speculation-rules.php [Sat Feb 21 16:21:52.886286 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-fatal-error-handler.php [Sat Feb 21 16:21:52.887177 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-encoding.php [Sat Feb 21 16:21:52.887201 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/functions.php [Sat Feb 21 16:21:52.887229 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-editor.php [Sat Feb 21 16:21:52.887266 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/template-loader.php [Sat Feb 21 16:21:52.890200 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/user.php [Sat Feb 21 16:21:52.890239 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/block-patterns.php [Sat Feb 21 16:21:52.890273 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/general-template.php [Sat Feb 21 16:21:52.890293 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-error.php [Sat Feb 21 16:21:52.890311 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-hook.php [Sat Feb 21 16:21:52.890331 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-curl.php [Sat Feb 21 16:21:52.890355 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-user.php [Sat Feb 21 16:21:52.890384 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed-rss.php [Sat Feb 21 16:21:52.890413 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-manager.php [Sat Feb 21 16:21:52.890447 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/comment-template.php [Sat Feb 21 16:21:52.892413 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-oembed.php [Sat Feb 21 16:21:52.892467 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-setting.php [Sat Feb 21 16:21:52.892510 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-paused-extensions-storage.php [Sat Feb 21 16:21:52.892795 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-network.php [Sat Feb 21 16:21:52.892824 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-theme-json.php [Sat Feb 21 16:21:52.892849 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-user-meta-session-tokens.php [Sat Feb 21 16:21:52.892874 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-url-pattern-prefixer.php [Sat Feb 21 16:21:52.892895 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-object-cache.php [Sat Feb 21 16:21:52.892950 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class.wp-scripts.php [Sat Feb 21 16:21:52.893002 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-deprecated.php [Sat Feb 21 16:21:52.893033 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-response.php [Sat Feb 21 16:21:52.893056 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/wp-db.php [Sat Feb 21 16:21:52.893077 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/functions.wp-styles.php [Sat Feb 21 16:21:52.893095 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pluggable.php [Sat Feb 21 16:21:52.893130 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-site-query.php [Sat Feb 21 16:21:52.893151 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-term-query.php [Sat Feb 21 16:21:52.893169 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-duotone.php [Sat Feb 21 16:21:52.896639 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-bindings-source.php [Sat Feb 21 16:21:52.896695 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-theme-json-resolver.php [Sat Feb 21 16:21:52.896718 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-walker-nav-menu.php [Sat Feb 21 16:21:52.896742 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-walker-category-dropdown.php [Sat Feb 21 16:21:52.896760 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/deprecated.php [Sat Feb 21 16:21:52.896779 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/nav-menu-template.php [Sat Feb 21 16:21:52.898126 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/https-detection.php [Sat Feb 21 16:21:52.898157 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-date-query.php [Sat Feb 21 16:21:52.898202 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/date.php [Sat Feb 21 16:21:52.898222 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/admin-bar.php [Sat Feb 21 16:21:52.898242 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/category-template.php [Sat Feb 21 16:21:52.898274 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/abilities-api.php [Sat Feb 21 16:21:52.898293 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http.php [Sat Feb 21 16:21:52.898313 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-exception.php [Sat Feb 21 16:21:52.898329 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/comment.php [Sat Feb 21 16:21:52.898347 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/script-modules.php [Sat Feb 21 16:21:52.898362 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/cron.php [Sat Feb 21 16:21:52.898384 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-files.php [Sat Feb 21 16:21:52.898406 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-processor.php [Sat Feb 21 16:21:52.898443 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-requests-hooks.php [Sat Feb 21 16:21:52.898478 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-IXR.php [Sat Feb 21 16:21:52.899891 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-default-constants.php [Sat Feb 21 16:21:52.899923 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-type.php [Sat Feb 21 16:21:52.899940 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/meta.php [Sat Feb 21 16:21:52.899965 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-site.php [Sat Feb 21 16:21:52.899986 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-user-request.php [Sat Feb 21 16:21:52.902204 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/global-styles-and-settings.php [Sat Feb 21 16:21:52.903759 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-roles.php [Sat Feb 21 16:21:52.903789 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/feed.php [Sat Feb 21 16:21:52.903822 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/template-canvas.php [Sat Feb 21 16:21:52.903845 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-cookie.php [Sat Feb 21 16:21:52.903867 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-feed.php [Sat Feb 21 16:21:52.903906 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-http-ixr-client.php [Sat Feb 21 16:21:52.903928 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-token-map.php [Sat Feb 21 16:21:52.903976 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-customize-section.php [Sat Feb 21 16:21:52.904018 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-xmlrpc-server.php [Sat Feb 21 16:21:52.905459 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-parser-block.php [Sat Feb 21 16:21:52.905517 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-block-pattern-categories-registry.php [Sat Feb 21 16:21:52.905542 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-script-modules.php [Sat Feb 21 16:21:52.905557 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/vars.php [Sat Feb 21 16:21:52.907023 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/class-wp-comment-query.php [Sat Feb 21 16:21:52.907054 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/error-protection.php [Sat Feb 21 16:21:52.907085 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/ms-site.php [Sat Feb 21 16:21:53.102346 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/aa.php [Sat Feb 21 16:21:54.881291 2026] [proxy_fcgi:error] [pid 2081467:tid 2081467] [client 20.205.120.43:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:21:55.480639 2026] [security2:error] [pid 2012077:tid 2012077] [client 77.83.39.170:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.haq.rentacarkarachi.com"] [uri "/awstats/.env"] [unique_id "aZmVU1QdZ64h20JcCSpJswAAAAs"] [Sat Feb 21 16:21:58.615905 2026] [security2:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/.well-known/"] [unique_id "aZmVVq_eqbquRKin0NL3UQAAAAQ"] [Sat Feb 21 16:21:58.616014 2026] [security2:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/.well-known/"] [unique_id "aZmVVq_eqbquRKin0NL3UQAAAAQ"] [Sat Feb 21 16:22:00.924293 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/autoload_classmap.php [Sat Feb 21 16:22:06.957058 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/uploads/json.php [Sat Feb 21 16:22:08.978338 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/SimplePie/autoloader.php [Sat Feb 21 16:22:09.179126 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/customize/chosen.php [Sat Feb 21 16:22:10.779197 2026] [access_compat:error] [pid 2012077:tid 2012077] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/shell20211028.php [Sat Feb 21 16:22:12.354416 2026] [access_compat:error] [pid 2048946:tid 2048946] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/function.php [Sat Feb 21 16:22:14.145476 2026] [access_compat:error] [pid 2058141:tid 2058141] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/style-css.php [Sat Feb 21 16:22:15.203821 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:22:16.892051 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pomo/mo.php [Sat Feb 21 16:22:16.892282 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pomo/po.php [Sat Feb 21 16:22:16.892350 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pomo/plural-forms.php [Sat Feb 21 16:22:16.892387 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pomo/streams.php [Sat Feb 21 16:22:16.892431 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pomo/entry.php [Sat Feb 21 16:22:16.892499 2026] [access_compat:error] [pid 2093830:tid 2093830] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-includes/pomo/translations.php [Sat Feb 21 16:22:17.088408 2026] [access_compat:error] [pid 2093962:tid 2093962] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/file.php [Sat Feb 21 16:22:19.319104 2026] [proxy_fcgi:error] [pid 2085180:tid 2085180] [client 20.205.120.43:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:22:21.294341 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/alfa.php [Sat Feb 21 16:22:23.128980 2026] [access_compat:error] [pid 2072461:tid 2072461] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/inputs.php [Sat Feb 21 16:22:24.873505 2026] [access_compat:error] [pid 2049075:tid 2049075] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/js/widgets/cloud.php [Sat Feb 21 16:22:27.403591 2026] [security2:error] [pid 2048946:tid 2048946] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmVcw6zZrsiEKn4Yr9eVQAAAAA"] [Sat Feb 21 16:22:27.403591 2026] [security2:error] [pid 2049075:tid 2049075] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.dist"] [unique_id "aZmVc8rssm78_TCE3WXQAAAAAAI"] [Sat Feb 21 16:22:27.420233 2026] [security2:error] [pid 2072461:tid 2072461] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/symfony/.env.local"] [unique_id "aZmVc6_eqbquRKin0NL3YAAAAAQ"] [Sat Feb 21 16:22:27.429355 2026] [security2:error] [pid 2093830:tid 2093830] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.test"] [unique_id "aZmVcyayrk5v_v1pHET_oQAAAAM"] [Sat Feb 21 16:22:27.436751 2026] [security2:error] [pid 2058141:tid 2058141] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.testing"] [unique_id "aZmVc7Boqed92ItjVUgMvQAAAAg"] [Sat Feb 21 16:22:27.441647 2026] [security2:error] [pid 2081467:tid 2081467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/api/.env"] [unique_id "aZmVc0Nk-QfGrUjpm5a2YgAAAAk"] [Sat Feb 21 16:22:27.441642 2026] [security2:error] [pid 2085180:tid 2085180] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.staging"] [unique_id "aZmVc1D6y5V5h1JF0WB05AAAAAY"] [Sat Feb 21 16:22:27.442554 2026] [security2:error] [pid 2093962:tid 2093962] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.save"] [unique_id "aZmVc8lqhQ3szjhhYJUL8gAAAAo"] [Sat Feb 21 16:22:27.940568 2026] [security2:error] [pid 2094421:tid 2094421] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.development"] [unique_id "aZmVc5deU3PH5cIKjMPnpwAAAAE"] [Sat Feb 21 16:22:28.029986 2026] [security2:error] [pid 2087455:tid 2087455] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/app/.env"] [unique_id "aZmVdAnBJ1J17V47PDK1eAAAAAU"] [Sat Feb 21 16:22:28.547756 2026] [security2:error] [pid 2049075:tid 2049075] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/www/.env"] [unique_id "aZmVdMrssm78_TCE3WXQAQAAAAI"] [Sat Feb 21 16:22:28.839267 2026] [security2:error] [pid 2085180:tid 2085180] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/app/.env"] [unique_id "aZmVdFD6y5V5h1JF0WB05QAAAAY"] [Sat Feb 21 16:22:28.877505 2026] [security2:error] [pid 2058141:tid 2058141] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.testing"] [unique_id "aZmVdLBoqed92ItjVUgMvgAAAAg"] [Sat Feb 21 16:22:28.936459 2026] [security2:error] [pid 2094431:tid 2094431] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/admin/.env"] [unique_id "aZmVdPzCTPx5sLS0QccRKQAAAAc"] [Sat Feb 21 16:22:28.952562 2026] [security2:error] [pid 2094432:tid 2094432] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.prod"] [unique_id "aZmVdKUh7-tyE4p640FqRAAAAAw"] [Sat Feb 21 16:22:29.108261 2026] [security2:error] [pid 2072461:tid 2072461] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/laravel/.env"] [unique_id "aZmVda_eqbquRKin0NL3YQAAAAQ"] [Sat Feb 21 16:22:29.676015 2026] [security2:error] [pid 2093962:tid 2093962] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/node/.env"] [unique_id "aZmVdclqhQ3szjhhYJUL8wAAAAo"] [Sat Feb 21 16:22:29.728326 2026] [security2:error] [pid 2048946:tid 2048946] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/laravel/.env"] [unique_id "aZmVdQ6zZrsiEKn4Yr9eVwAAAAA"] [Sat Feb 21 16:22:29.731291 2026] [security2:error] [pid 2094421:tid 2094421] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/node/.env.production"] [unique_id "aZmVdZdeU3PH5cIKjMPnqAAAAAE"] [Sat Feb 21 16:22:29.864647 2026] [security2:error] [pid 2087455:tid 2087455] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.container"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.container"] [unique_id "aZmVdQnBJ1J17V47PDK1eQAAAAU"] [Sat Feb 21 16:22:29.940049 2026] [security2:error] [pid 2094442:tid 2094442] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/symfony/.env.local"] [unique_id "aZmVdRJB4NvLU70-a1Gd2QAAAA0"] [Sat Feb 21 16:22:29.941132 2026] [security2:error] [pid 2094444:tid 2094444] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.example"] [unique_id "aZmVdfgemdKbQnYXoeHJhwAAAA8"] [Sat Feb 21 16:22:29.942884 2026] [security2:error] [pid 2093830:tid 2093830] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/node/.env.development"] [unique_id "aZmVdSayrk5v_v1pHET_owAAAAM"] [Sat Feb 21 16:22:29.967387 2026] [security2:error] [pid 2094445:tid 2094445] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmVdQiNQ11wXUoMa86-RwAAABA"] [Sat Feb 21 16:22:30.072946 2026] [security2:error] [pid 2049075:tid 2049075] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.production"] [unique_id "aZmVdsrssm78_TCE3WXQAgAAAAI"] [Sat Feb 21 16:22:30.194400 2026] [security2:error] [pid 2058141:tid 2058141] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.example"] [unique_id "aZmVdrBoqed92ItjVUgMvwAAAAg"] [Sat Feb 21 16:22:30.973071 2026] [security2:error] [pid 2094461:tid 2094461] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/frontend/.env"] [unique_id "aZmVdp-PnHuR3F3A4U6jNAAAABI"] [Sat Feb 21 16:22:30.981728 2026] [security2:error] [pid 2094463:tid 2094463] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/html/.env"] [unique_id "aZmVdgDiBHMnuZlwu6EgvAAAABQ"] [Sat Feb 21 16:22:31.024525 2026] [security2:error] [pid 2094468:tid 2094468] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.git/config"] [unique_id "aZmVd6oKeijpbqe0GEZaGwAAABg"] [Sat Feb 21 16:22:31.175693 2026] [security2:error] [pid 2072461:tid 2072461] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/public/.env"] [unique_id "aZmVd6_eqbquRKin0NL3YgAAAAQ"] [Sat Feb 21 16:22:31.944421 2026] [security2:error] [pid 2012077:tid 2012077] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.prod"] [unique_id "aZmVd1QdZ64h20JcCSpJyQAAAAs"] [Sat Feb 21 16:22:32.012813 2026] [security2:error] [pid 2048946:tid 2048946] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.dist"] [unique_id "aZmVeA6zZrsiEKn4Yr9eWAAAAAA"] [Sat Feb 21 16:22:32.035894 2026] [security2:error] [pid 2094489:tid 2094489] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/django/.env"] [unique_id "aZmVeFZBtCiuq5vTHoSyjQAAABw"] [Sat Feb 21 16:22:32.046017 2026] [security2:error] [pid 2094487:tid 2094487] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.local"] [unique_id "aZmVeG9PopQ3dloQftj57gAAABo"] [Sat Feb 21 16:22:32.092573 2026] [security2:error] [pid 2094492:tid 2094492] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/symfony/.env.dev"] [unique_id "aZmVeHv_9ltKeJBijv9qEQAAAB4"] [Sat Feb 21 16:22:32.122220 2026] [security2:error] [pid 2094498:tid 2094498] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/django/.env.prod"] [unique_id "aZmVeLAtx1VBg4gZ-3jfRAAAACE"] [Sat Feb 21 16:22:32.148592 2026] [security2:error] [pid 2094502:tid 2094502] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.docker"] [unique_id "aZmVeBR3sXRiriItBpdK4AAAACM"] [Sat Feb 21 16:22:32.175705 2026] [security2:error] [pid 2094501:tid 2094501] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/api/.env"] [unique_id "aZmVePjhxaLpSLVQJFd8cwAAACI"] [Sat Feb 21 16:22:32.219657 2026] [security2:error] [pid 2094508:tid 2094508] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.production"] [unique_id "aZmVeC-dkYHKuqT1iJiBAgAAACQ"] [Sat Feb 21 16:22:32.262919 2026] [security2:error] [pid 2094509:tid 2094509] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/symfony/.env"] [unique_id "aZmVeLs5-a5n2f8cERqKmgAAACU"] [Sat Feb 21 16:22:32.314902 2026] [security2:error] [pid 2094512:tid 2094512] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.staging"] [unique_id "aZmVeN24_G4wKQOYd_CkJgAAACc"] [Sat Feb 21 16:22:32.409087 2026] [security2:error] [pid 2093962:tid 2093962] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.dev"] [unique_id "aZmVeMlqhQ3szjhhYJUL9AAAAAo"] [Sat Feb 21 16:22:32.829240 2026] [security2:error] [pid 2094486:tid 2094486] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/node/.env"] [unique_id "aZmVeCrR15x8r3L8hrf6VwAAABk"] [Sat Feb 21 16:22:33.378334 2026] [security2:error] [pid 2094524:tid 2094524] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/node/.env.production"] [unique_id "aZmVee5WCMot7polH2hZhgAAACk"] [Sat Feb 21 16:22:33.401500 2026] [security2:error] [pid 2094526:tid 2094526] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.test"] [unique_id "aZmVeYORm9f2eClZ2Tk8dQAAACs"] [Sat Feb 21 16:22:33.407159 2026] [security2:error] [pid 2094525:tid 2094525] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.dev"] [unique_id "aZmVeTb99vCrdM1JhfbjvQAAACo"] [Sat Feb 21 16:22:33.480398 2026] [security2:error] [pid 2094529:tid 2094529] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.backup"] [unique_id "aZmVeWYpsl-0GhYVcIyRuAAAAC4"] [Sat Feb 21 16:22:33.527111 2026] [security2:error] [pid 2094530:tid 2094530] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/backend/.env"] [unique_id "aZmVebU8gu1DFjh2tJZntAAAAC8"] [Sat Feb 21 16:22:33.540711 2026] [security2:error] [pid 2094531:tid 2094531] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.save"] [unique_id "aZmVeUi8-oLZCMhMNw_D8QAAADA"] [Sat Feb 21 16:22:33.543588 2026] [security2:error] [pid 2094532:tid 2094532] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/node/.env.development"] [unique_id "aZmVeT8XKIgZ00H1AKehOwAAADE"] [Sat Feb 21 16:22:33.628084 2026] [security2:error] [pid 2094539:tid 2094539] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.old"] [unique_id "aZmVefQAI3PtqM9PR9oUPgAAADM"] [Sat Feb 21 16:22:33.660714 2026] [security2:error] [pid 2094542:tid 2094542] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/public/.env"] [unique_id "aZmVeZIc0jUtQ5GGa5T5ewAAADQ"] [Sat Feb 21 16:22:33.693040 2026] [access_compat:error] [pid 2094543:tid 2094543] [client 20.205.120.43:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/1.php [Sat Feb 21 16:22:33.741052 2026] [security2:error] [pid 2094551:tid 2094551] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/symfony/.env"] [unique_id "aZmVeUqhYt_NcPkZfQXXgwAAADo"] [Sat Feb 21 16:22:33.877931 2026] [security2:error] [pid 2094560:tid 2094560] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.container"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.container"] [unique_id "aZmVeQNRNYjam874J3qZOQAAAD0"] [Sat Feb 21 16:22:34.011041 2026] [security2:error] [pid 2094571:tid 2094571] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/django/.env.prod"] [unique_id "aZmVeQYvpXz0VKGOOqhB6wAAAEA"] [Sat Feb 21 16:22:34.035935 2026] [security2:error] [pid 2094575:tid 2094575] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/backend/.env"] [unique_id "aZmVerfakvpK81u9vHaauAAAAEI"] [Sat Feb 21 16:22:34.062038 2026] [security2:error] [pid 2094444:tid 2094444] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.old"] [unique_id "aZmVevgemdKbQnYXoeHJiAAAAA8"] [Sat Feb 21 16:22:34.073093 2026] [security2:error] [pid 2094576:tid 2094576] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/symfony/.env.dev"] [unique_id "aZmVeqLjvwQ9cBMNRnK9mwAAAEM"] [Sat Feb 21 16:22:34.148696 2026] [security2:error] [pid 2094578:tid 2094578] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/frontend/.env"] [unique_id "aZmVep_FAskqoPlrzcjLBAAAAEQ"] [Sat Feb 21 16:22:34.239183 2026] [security2:error] [pid 2094590:tid 2094590] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/admin/.env"] [unique_id "aZmVegI855Y1sX9yHK791gAAAEg"] [Sat Feb 21 16:22:34.245931 2026] [security2:error] [pid 2094584:tid 2094584] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.backup"] [unique_id "aZmVeiXdD-myWbKKd1pGLAAAAEU"] [Sat Feb 21 16:22:34.283643 2026] [security2:error] [pid 2094587:tid 2094587] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/www/.env"] [unique_id "aZmVet-LrQcRuHKf2oT1CgAAAEc"] [Sat Feb 21 16:22:34.308637 2026] [security2:error] [pid 2094442:tid 2094442] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/html/.env"] [unique_id "aZmVehJB4NvLU70-a1Gd2gAAAA0"] [Sat Feb 21 16:22:34.762477 2026] [security2:error] [pid 2049075:tid 2049075] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.local"] [unique_id "aZmVesrssm78_TCE3WXQAwAAAAI"] [Sat Feb 21 16:22:35.262958 2026] [security2:error] [pid 2094606:tid 2094606] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/django/.env"] [unique_id "aZmVe8zCn7uTF-YMvM80XQAAAEo"] [Sat Feb 21 16:22:35.387416 2026] [security2:error] [pid 2094610:tid 2094610] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.development"] [unique_id "aZmVe3GAfAhhc_WaSpOBOwAAAEw"] [Sat Feb 21 16:22:35.419251 2026] [security2:error] [pid 2094613:tid 2094613] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env.docker"] [unique_id "aZmVex_tL3kW7Dlgr9K8uQAAAE4"] [Sat Feb 21 16:22:35.467310 2026] [security2:error] [pid 2094616:tid 2094616] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.git/config"] [unique_id "aZmVe_aTvHoK4ObCFYpw3QAAAE8"] [Sat Feb 21 16:22:37.796163 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:38.797382 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:39.798669 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:40.800015 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:41.801330 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:42.802586 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:43.803942 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:44.302324 2026] [access_compat:error] [pid 2094632:tid 2094632] [client 157.55.39.14:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 16:22:44.302772 2026] [access_compat:error] [pid 2094632:tid 2094632] [client 157.55.39.14:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 16:22:44.303394 2026] [access_compat:error] [pid 2094632:tid 2094632] [client 157.55.39.14:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 16:22:44.805268 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:45.566186 2026] [security2:error] [pid 2094578:tid 2094578] [client 49.248.192.204:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "37.60.246.33"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmVep_FAskqoPlrzcjLBAAAAEQ"] [Sat Feb 21 16:22:45.566256 2026] [security2:error] [pid 2094578:tid 2094578] [client 49.248.192.204:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "37.60.246.33"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmVep_FAskqoPlrzcjLBAAAAEQ"] [Sat Feb 21 16:22:45.806543 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:46.807904 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:47.809419 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:48.811556 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:49.812885 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:50.814258 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:51.815674 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:52.817048 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:53.818517 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:54.819872 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:55.821143 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:56.822501 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:57.823836 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:58.825162 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:22:59.826655 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:00.828177 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:01.829567 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:02.830926 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:03.832254 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:04.833640 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:05.834944 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:06.314021 2026] [security2:error] [pid 2094576:tid 2094576] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVmqLjvwQ9cBMNRnK9nAAAAEM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:23:06.314114 2026] [security2:error] [pid 2094576:tid 2094576] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVmqLjvwQ9cBMNRnK9nAAAAEM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:23:06.836243 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:07.837580 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:08.838913 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:09.840298 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:10.841705 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:11.843039 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:12.844393 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:13.845828 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:14.847152 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:15.848595 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:16.849432 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:17.850755 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:18.852261 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:19.853741 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:20.855153 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:20.874775 2026] [access_compat:error] [pid 2094551:tid 2094551] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:23:21.856535 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:22.857907 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:23.859270 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:24.860640 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:25.861356 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:26.862659 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:27.863963 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:27.909917 2026] [security2:error] [pid 2094649:tid 2094649] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVr08VUd9ZTYBZfr1QOgAAAGQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 16:23:27.910005 2026] [security2:error] [pid 2094649:tid 2094649] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVr08VUd9ZTYBZfr1QOgAAAGQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 16:23:28.865377 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:29.866941 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:30.867566 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:31.869010 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:32.870544 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:33.872077 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:34.873456 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:35.874853 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:36.876194 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:37.877485 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:38.878774 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:39.880110 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:40.863434 2026] [security2:error] [pid 2094543:tid 2094543] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVvG_SqEhR8OheGPf8CAAAADU"] [Sat Feb 21 16:23:40.863568 2026] [security2:error] [pid 2094543:tid 2094543] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVvG_SqEhR8OheGPf8CAAAADU"] [Sat Feb 21 16:23:40.881453 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:41.882805 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:42.884142 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:43.885467 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:44.886732 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:45.751492 2026] [security2:error] [pid 2094626:tid 2094626] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/sudoers" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sudoers found within ARGS:path: /etc/sudoers.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmVwdaJbpQRA6DSNc5RzAAAAFQ"] [Sat Feb 21 16:23:45.888013 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:46.889384 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:47.295429 2026] [security2:error] [pid 2094607:tid 2094607] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVwz8OIjcBDLd5hgE7JQAAAEs"] [Sat Feb 21 16:23:47.295491 2026] [security2:error] [pid 2094607:tid 2094607] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVwz8OIjcBDLd5hgE7JQAAAEs"] [Sat Feb 21 16:23:47.890819 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:48.041495 2026] [security2:error] [pid 2094655:tid 2094655] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVw3SBDl9nwSDa_WFdvQAAAGY"] [Sat Feb 21 16:23:48.041580 2026] [security2:error] [pid 2094655:tid 2094655] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVw3SBDl9nwSDa_WFdvQAAAGY"] [Sat Feb 21 16:23:48.663380 2026] [security2:error] [pid 2094486:tid 2094486] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmVxCrR15x8r3L8hrf6XgAAABk"] [Sat Feb 21 16:23:48.892169 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:49.194193 2026] [security2:error] [pid 2094558:tid 2094558] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVxeeYb2OKw6IFOXv-aAAAADw"] [Sat Feb 21 16:23:49.194266 2026] [security2:error] [pid 2094558:tid 2094558] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmVxeeYb2OKw6IFOXv-aAAAADw"] [Sat Feb 21 16:23:49.893368 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:50.846447 2026] [security2:error] [pid 2094492:tid 2094492] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/modules" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/modules found within ARGS:path: /etc/modules-load.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmVxnv_9ltKeJBijv9qGQAAAB4"] [Sat Feb 21 16:23:50.894655 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:51.895942 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:52.897309 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:53.898731 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:54.900173 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:55.901549 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:56.902887 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:57.904280 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:58.905763 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:23:59.907229 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:00.908630 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:01.910043 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:02.911371 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:03.912876 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:04.914179 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:05.914768 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:06.916100 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:08.918697 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:09.919972 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:10.921302 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:11.922646 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:12.854067 2026] [security2:error] [pid 2094571:tid 2094571] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmV3AYvpXz0VKGOOqhB-AAAAEA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 16:24:12.854118 2026] [security2:error] [pid 2094571:tid 2094571] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmV3AYvpXz0VKGOOqhB-AAAAEA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 16:24:20.933819 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:24:31.238774 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:24:33.837459 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmV8QnBJ1J17V47PDK1kQAAAAU"] [Sat Feb 21 16:24:42.930409 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmV-uxZ8aVGL1GXrWCeUAAAAF8"] [Sat Feb 21 16:24:42.930549 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmV-uxZ8aVGL1GXrWCeUAAAAF8"] [Sat Feb 21 16:24:45.762321 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:file: bash.bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmV_UgDADwSahU77Sc9mwAAABY"] [Sat Feb 21 16:24:52.420060 2026] [security2:error] [pid 2094445:tid 2094445] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWBAiNQ11wXUoMa86-egAAABA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop4 [Sat Feb 21 16:24:52.420157 2026] [security2:error] [pid 2094445:tid 2094445] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWBAiNQ11wXUoMa86-egAAABA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop4 [Sat Feb 21 16:25:14.092473 2026] [security2:error] [pid 2094445:tid 2094445] [client 14.237.163.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-global": Permission denied [hostname "www.edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmWGQiNQ11wXUoMa86-hAAAABA"] [Sat Feb 21 16:25:14.092527 2026] [security2:error] [pid 2094445:tid 2094445] [client 14.237.163.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-ip": Permission denied [hostname "www.edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmWGQiNQ11wXUoMa86-hAAAABA"] [Sat Feb 21 16:25:41.226139 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWNdpGmemyPzimpI2LFgAAAAA"] [Sat Feb 21 16:25:41.226243 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWNdpGmemyPzimpI2LFgAAAAA"] [Sat Feb 21 16:25:42.333578 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWNgnBJ1J17V47PDK1xQAAAAU"] [Sat Feb 21 16:25:42.333653 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWNgnBJ1J17V47PDK1xQAAAAU"] [Sat Feb 21 16:25:42.932252 2026] [access_compat:error] [pid 2094575:tid 2094575] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:25:43.935258 2026] [security2:error] [pid 2094542:tid 2094542] [client 207.46.13.52:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmWNpIc0jUtQ5GGa5T5vwAAADQ"] [Sat Feb 21 16:25:43.935320 2026] [security2:error] [pid 2094542:tid 2094542] [client 207.46.13.52:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmWNpIc0jUtQ5GGa5T5vwAAADQ"] [Sat Feb 21 16:25:46.896124 2026] [security2:error] [pid 2094445:tid 2094445] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWOgiNQ11wXUoMa86-mwAAABA"] [Sat Feb 21 16:25:46.896219 2026] [security2:error] [pid 2094445:tid 2094445] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWOgiNQ11wXUoMa86-mwAAABA"] [Sat Feb 21 16:25:50.886731 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWPpIc0jUtQ5GGa5T5ywAAADQ"] [Sat Feb 21 16:25:50.886831 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWPpIc0jUtQ5GGa5T5ywAAADQ"] [Sat Feb 21 16:26:06.637023 2026] [security2:error] [pid 2094605:tid 2094605] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWTmKPMemw-Pg12QGoPgAAAEk"] [Sat Feb 21 16:26:06.637141 2026] [security2:error] [pid 2094605:tid 2094605] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWTmKPMemw-Pg12QGoPgAAAEk"] [Sat Feb 21 16:26:26.366332 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWYuxZ8aVGL1GXrWCerwAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem [Sat Feb 21 16:26:26.366398 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWYuxZ8aVGL1GXrWCerwAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem [Sat Feb 21 16:26:26.779014 2026] [security2:error] [pid 2094605:tid 2094605] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/.env.live"] [unique_id "aZmWYmKPMemw-Pg12QGoTgAAAEk"] [Sat Feb 21 16:26:28.619441 2026] [security2:error] [pid 2094605:tid 2094605] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/.env.production"] [unique_id "aZmWZGKPMemw-Pg12QGoTwAAAEk"] [Sat Feb 21 16:26:28.737560 2026] [security2:error] [pid 2095811:tid 2095811] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/.env"] [unique_id "aZmWZNpGmemyPzimpI2LUwAAAAA"] [Sat Feb 21 16:26:28.739784 2026] [security2:error] [pid 2094641:tid 2094641] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/.env.bak"] [unique_id "aZmWZOxZ8aVGL1GXrWCesQAAAF8"] [Sat Feb 21 16:26:30.311013 2026] [security2:error] [pid 2095811:tid 2095811] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/.env.prod"] [unique_id "aZmWZtpGmemyPzimpI2LVAAAAAA"] [Sat Feb 21 16:26:30.491883 2026] [security2:error] [pid 2094502:tid 2094502] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/crm/.env"] [unique_id "aZmWZhR3sXRiriItBpdLYQAAACM"] [Sat Feb 21 16:26:30.507537 2026] [security2:error] [pid 2097018:tid 2097018] [client 45.148.10.238:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/awstats/.env"] [unique_id "aZmWZsEeUwbTJVvyvwKPDwAAAAE"] [Sat Feb 21 16:26:45.051799 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:27:08.775138 2026] [security2:error] [pid 2087455:tid 2087455] [client 167.71.15.42:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZmWiwnBJ1J17V47PDK2IwAAAAU"] [Sat Feb 21 16:27:08.775224 2026] [security2:error] [pid 2087455:tid 2087455] [client 167.71.15.42:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZmWiwnBJ1J17V47PDK2IwAAAAU"] [Sat Feb 21 16:27:11.723731 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWjxR3sXRiriItBpdLhgAAACM"] [Sat Feb 21 16:27:11.723839 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWjxR3sXRiriItBpdLhgAAACM"] [Sat Feb 21 16:27:42.020902 2026] [security2:error] [pid 2097018:tid 2097018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWrcEeUwbTJVvyvwKPTAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq%2F3 [Sat Feb 21 16:27:42.021021 2026] [security2:error] [pid 2097018:tid 2097018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWrcEeUwbTJVvyvwKPTAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq%2F3 [Sat Feb 21 16:27:43.441804 2026] [proxy_fcgi:error] [pid 2087455:tid 2087455] [client 34.118.250.161:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:27:44.603275 2026] [security2:error] [pid 2094542:tid 2094542] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWsJIc0jUtQ5GGa5T6RwAAADQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:27:44.603345 2026] [security2:error] [pid 2094542:tid 2094542] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWsJIc0jUtQ5GGa5T6RwAAADQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:27:50.806557 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWtkgDADwSahU77Sc-VQAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:27:50.806647 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWtkgDADwSahU77Sc-VQAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:27:56.657974 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWvOxZ8aVGL1GXrWCfFgAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:27:56.658107 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWvOxZ8aVGL1GXrWCfFgAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:27:57.188786 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWvRR3sXRiriItBpdLvwAAACM"] [Sat Feb 21 16:27:57.188982 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWvRR3sXRiriItBpdLvwAAACM"] [Sat Feb 21 16:28:08.864304 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWyNpGmemyPzimpI2LuwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 16:28:08.864376 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWyNpGmemyPzimpI2LuwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 16:28:09.461069 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWyexZ8aVGL1GXrWCfHwAAAF8"] [Sat Feb 21 16:28:09.461140 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmWyexZ8aVGL1GXrWCfHwAAAF8"] [Sat Feb 21 16:28:17.233946 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW0ZIc0jUtQ5GGa5T6cgAAADQ"] [Sat Feb 21 16:28:17.234032 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW0ZIc0jUtQ5GGa5T6cgAAADQ"] [Sat Feb 21 16:28:19.161162 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW05Ic0jUtQ5GGa5T6dQAAADQ"] [Sat Feb 21 16:28:19.161359 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW05Ic0jUtQ5GGa5T6dQAAADQ"] [Sat Feb 21 16:28:31.178464 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW3wnBJ1J17V47PDK2jgAAAAU"] [Sat Feb 21 16:28:31.178565 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW3wnBJ1J17V47PDK2jgAAAAU"] [Sat Feb 21 16:28:32.080679 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW3wnBJ1J17V47PDK2kAAAAAU"] [Sat Feb 21 16:28:32.080777 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW3wnBJ1J17V47PDK2kAAAAAU"] [Sat Feb 21 16:29:03.634432 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:29:04.207645 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW_wnBJ1J17V47PDK2rwAAAAU"] [Sat Feb 21 16:29:04.207734 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmW_wnBJ1J17V47PDK2rwAAAAU"] [Sat Feb 21 16:29:11.941531 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXB-xZ8aVGL1GXrWCfbwAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:29:11.941616 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXB-xZ8aVGL1GXrWCfbwAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:29:26.034036 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXFUgDADwSahU77Sc-xAAAABY"] [Sat Feb 21 16:29:26.034128 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXFUgDADwSahU77Sc-xAAAABY"] [Sat Feb 21 16:29:29.468766 2026] [security2:error] [pid 2094605:tid 2094605] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/ld.so.conf" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ld.so.conf found within ARGS:path: /etc/ld.so.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmXGWKPMemw-Pg12QGpHQAAAEk"] [Sat Feb 21 16:29:37.373555 2026] [cgi:warn] [pid 2094655:tid 2094655] [client 216.73.216.119:0] AH01220: Timeout waiting for output from CGI script /usr/local/cpanel/cgi-sys/ea-php83 [Sat Feb 21 16:29:37.373822 2026] [core:error] [pid 2094655:tid 2094655] (70007)The timeout specified has expired: [client 216.73.216.119:0] AH00574: ap_content_length_filter: apr_bucket_read() failed [Sat Feb 21 16:29:40.134946 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXJNpGmemyPzimpI2MMAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 16:29:40.135034 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXJNpGmemyPzimpI2MMAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 16:29:42.610688 2026] [cgi:warn] [pid 2094560:tid 2094560] [client 216.73.216.119:0] AH01220: Timeout waiting for output from CGI script /usr/local/cpanel/cgi-sys/ea-php83 [Sat Feb 21 16:29:42.611826 2026] [core:error] [pid 2094560:tid 2094560] (70007)The timeout specified has expired: [client 216.73.216.119:0] AH00574: ap_content_length_filter: apr_bucket_read() failed [Sat Feb 21 16:29:43.174282 2026] [security2:error] [pid 2094605:tid 2094605] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "adilaasif.com"] [uri "/.env"] [unique_id "aZmXJ2KPMemw-Pg12QGpLwAAAEk"] [Sat Feb 21 16:29:43.670367 2026] [security2:error] [pid 2087455:tid 2087455] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "adilaasif.com"] [uri "/.git/config"] [unique_id "aZmXJwnBJ1J17V47PDK23gAAAAU"] [Sat Feb 21 16:29:44.378692 2026] [security2:error] [pid 2094465:tid 2094465] [client 170.64.231.99:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "adilaasif.com"] [uri "/"] [unique_id "aZmXKEgDADwSahU77Sc-3wAAABY"] [Sat Feb 21 16:29:44.379630 2026] [security2:error] [pid 2097018:tid 2097018] [client 170.64.231.99:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "adilaasif.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmXKMEeUwbTJVvyvwKP3wAAAAE"] [Sat Feb 21 16:29:45.229274 2026] [security2:error] [pid 2094502:tid 2094502] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../css/gm.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php"] [unique_id "aZmXKRR3sXRiriItBpdMOAAAACM"] [Sat Feb 21 16:29:45.229384 2026] [security2:error] [pid 2094502:tid 2094502] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxaction=getids&cfg=../css/gm.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php"] [unique_id "aZmXKRR3sXRiriItBpdMOAAAACM"] [Sat Feb 21 16:29:45.486611 2026] [security2:error] [pid 2087455:tid 2087455] [client 170.64.231.99:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmXKQnBJ1J17V47PDK24gAAAAU"] [Sat Feb 21 16:29:45.486759 2026] [security2:error] [pid 2087455:tid 2087455] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmXKQnBJ1J17V47PDK24gAAAAU"] [Sat Feb 21 16:29:45.486836 2026] [security2:error] [pid 2087455:tid 2087455] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmXKQnBJ1J17V47PDK24gAAAAU"] [Sat Feb 21 16:29:45.487452 2026] [security2:error] [pid 2094502:tid 2094502] [client 170.64.231.99:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmXKRR3sXRiriItBpdMOQAAACM"] [Sat Feb 21 16:29:45.487592 2026] [security2:error] [pid 2094502:tid 2094502] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmXKRR3sXRiriItBpdMOQAAACM"] [Sat Feb 21 16:29:45.487683 2026] [security2:error] [pid 2094502:tid 2094502] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmXKRR3sXRiriItBpdMOQAAACM"] [Sat Feb 21 16:29:45.490005 2026] [security2:error] [pid 2094465:tid 2094465] [client 170.64.231.99:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmXKUgDADwSahU77Sc-4QAAABY"] [Sat Feb 21 16:29:45.490118 2026] [security2:error] [pid 2094465:tid 2094465] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmXKUgDADwSahU77Sc-4QAAABY"] [Sat Feb 21 16:29:45.490212 2026] [security2:error] [pid 2094465:tid 2094465] [client 170.64.231.99:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "adilaasif.com"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmXKUgDADwSahU77Sc-4QAAABY"] [Sat Feb 21 16:29:58.055086 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXNW_8bsSUFLS0rAkl2wAAAAI"] [Sat Feb 21 16:29:58.055220 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXNW_8bsSUFLS0rAkl2wAAAAI"] [Sat Feb 21 16:30:17.270125 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXSQnBJ1J17V47PDK3EQAAAAU"] [Sat Feb 21 16:30:17.270237 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXSQnBJ1J17V47PDK3EQAAAAU"] [Sat Feb 21 16:30:23.165780 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXTwnBJ1J17V47PDK3GgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:30:23.165873 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXTwnBJ1J17V47PDK3GgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:30:25.314050 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXUW_8bsSUFLS0rAkl9wAAAAI"] [Sat Feb 21 16:30:25.314133 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXUW_8bsSUFLS0rAkl9wAAAAI"] [Sat Feb 21 16:30:29.875825 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXVRR3sXRiriItBpdMfAAAACM"] [Sat Feb 21 16:30:29.875912 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXVRR3sXRiriItBpdMfAAAACM"] [Sat Feb 21 16:30:31.165737 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXVxR3sXRiriItBpdMfgAAACM"] [Sat Feb 21 16:30:31.165823 2026] [security2:error] [pid 2094502:tid 2094502] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXVxR3sXRiriItBpdMfgAAACM"] [Sat Feb 21 16:30:40.400668 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/simple.php [Sat Feb 21 16:30:40.858967 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/inputs.php [Sat Feb 21 16:30:41.814701 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/autoload_classmap.php [Sat Feb 21 16:30:42.260466 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/file2.php [Sat Feb 21 16:30:42.963406 2026] [access_compat:error] [pid 2094575:tid 2094575] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/file.php [Sat Feb 21 16:30:43.223952 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/chosen.php [Sat Feb 21 16:30:43.512939 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/item.php [Sat Feb 21 16:30:44.597629 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/zwso.php [Sat Feb 21 16:30:44.833048 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-conflg.php [Sat Feb 21 16:30:47.897440 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:30:48.545804 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cong.php [Sat Feb 21 16:30:49.475776 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/dropdown.php [Sat Feb 21 16:30:49.688255 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXadqfQ3heRoVdf2nHuAAAAAM"] [Sat Feb 21 16:30:49.688339 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXadqfQ3heRoVdf2nHuAAAAAM"] [Sat Feb 21 16:30:50.576176 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 109.70.100.2:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/ [Sat Feb 21 16:30:51.178935 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/repeater.php [Sat Feb 21 16:30:51.466301 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-2019.php [Sat Feb 21 16:30:52.061469 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/atomlib.php [Sat Feb 21 16:30:52.063519 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXa-xZ8aVGL1GXrWCf_gAAAF8"] [Sat Feb 21 16:30:52.063598 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXa-xZ8aVGL1GXrWCf_gAAAF8"] [Sat Feb 21 16:30:52.159725 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXbNqfQ3heRoVdf2nHvgAAAAM"] [Sat Feb 21 16:30:52.159804 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXbNqfQ3heRoVdf2nHvgAAAAM"] [Sat Feb 21 16:30:52.342123 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/css.php [Sat Feb 21 16:30:52.565534 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/log.php [Sat Feb 21 16:30:52.823037 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mail.php [Sat Feb 21 16:30:53.026841 2026] [security2:error] [pid 2087455:tid 2087455] [client 109.70.100.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "protectmybills.uk"] [uri "/wp-content/plugins/js_composer/assets/lib/flexslider/jquery.flexslider.min.js"] [unique_id "aZmXbQnBJ1J17V47PDK3TgAAAAU"], referer: https://protectmybills.uk/ [Sat Feb 21 16:30:53.026920 2026] [security2:error] [pid 2087455:tid 2087455] [client 109.70.100.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "protectmybills.uk"] [uri "/wp-content/plugins/js_composer/assets/lib/flexslider/jquery.flexslider.min.js"] [unique_id "aZmXbQnBJ1J17V47PDK3TgAAAAU"], referer: https://protectmybills.uk/ [Sat Feb 21 16:30:53.225892 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/lufix.php [Sat Feb 21 16:30:53.458030 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/doc.php [Sat Feb 21 16:30:53.723554 2026] [access_compat:error] [pid 2094575:tid 2094575] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bak.php [Sat Feb 21 16:30:53.964492 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/content.php [Sat Feb 21 16:30:54.240681 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/upfile.php [Sat Feb 21 16:30:54.569153 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp.php [Sat Feb 21 16:30:54.865398 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bypass.php [Sat Feb 21 16:30:54.891172 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXbtpGmemyPzimpI2MqgAAAAA"] [Sat Feb 21 16:30:54.891269 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXbtpGmemyPzimpI2MqgAAAAA"] [Sat Feb 21 16:30:55.129593 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-activate.php [Sat Feb 21 16:30:55.153055 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXb0gDADwSahU77Sc_VQAAABY"] [Sat Feb 21 16:30:55.153155 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXb0gDADwSahU77Sc_VQAAABY"] [Sat Feb 21 16:30:55.361415 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/updates.php [Sat Feb 21 16:30:55.604696 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/radio.php [Sat Feb 21 16:30:55.879727 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/plugins.php [Sat Feb 21 16:30:56.166804 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xmrlpc.php [Sat Feb 21 16:30:56.544054 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ae.php [Sat Feb 21 16:30:56.760301 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/moon.php [Sat Feb 21 16:30:57.137021 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 109.70.100.2:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/contact-us/ [Sat Feb 21 16:30:57.383857 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/blog.php [Sat Feb 21 16:30:57.646997 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/themes.php [Sat Feb 21 16:30:57.873003 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ini.php [Sat Feb 21 16:30:58.147327 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/as.php [Sat Feb 21 16:30:58.450324 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/shell.php [Sat Feb 21 16:30:58.732358 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ws.php [Sat Feb 21 16:30:59.018167 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/makeasmtp.php [Sat Feb 21 16:30:59.332892 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-sigunq.php [Sat Feb 21 16:30:59.638431 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wso112233.php [Sat Feb 21 16:30:59.860225 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-atom.php [Sat Feb 21 16:31:00.151142 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfanew.php [Sat Feb 21 16:31:00.949446 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/fw.php [Sat Feb 21 16:31:01.354698 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/install.php [Sat Feb 21 16:31:01.771637 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-login.php [Sat Feb 21 16:31:02.019457 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/shapes.php [Sat Feb 21 16:31:02.870567 2026] [access_compat:error] [pid 2094575:tid 2094575] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/XxX.php [Sat Feb 21 16:31:03.128108 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/Marvins.php [Sat Feb 21 16:31:03.740917 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/olux.php [Sat Feb 21 16:31:03.905661 2026] [cgi:warn] [pid 2094445:tid 2094445] [client 216.73.216.119:0] AH01220: Timeout waiting for output from CGI script /usr/local/cpanel/cgi-sys/ea-php83 [Sat Feb 21 16:31:03.905934 2026] [core:error] [pid 2094445:tid 2094445] (70007)The timeout specified has expired: [client 216.73.216.119:0] AH00574: ap_content_length_filter: apr_bucket_read() failed [Sat Feb 21 16:31:03.961301 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wso.php [Sat Feb 21 16:31:05.228014 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/uploader.php [Sat Feb 21 16:31:05.491572 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/1337.php [Sat Feb 21 16:31:05.763185 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/user.php [Sat Feb 21 16:31:06.054321 2026] [security2:error] [pid 2094465:tid 2094465] [client 114.119.156.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-global": Permission denied [hostname "www.edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmXeUgDADwSahU77Sc_XgAAABY"], referer: http://www.edm-technology.com/services [Sat Feb 21 16:31:06.054420 2026] [security2:error] [pid 2094465:tid 2094465] [client 114.119.156.129:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-ip": Permission denied [hostname "www.edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmXeUgDADwSahU77Sc_XgAAABY"], referer: http://www.edm-technology.com/services [Sat Feb 21 16:31:06.357897 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-info.php [Sat Feb 21 16:31:06.945394 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wxo.php [Sat Feb 21 16:31:07.176414 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/amigo.php [Sat Feb 21 16:31:07.294148 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXe0gDADwSahU77Sc_XwAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:31:07.294289 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXe0gDADwSahU77Sc_XwAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:31:07.456062 2026] [access_compat:error] [pid 2094575:tid 2094575] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/yoi.php [Sat Feb 21 16:31:07.787675 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/codeboy1877_up.php [Sat Feb 21 16:31:08.359095 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-contentt.php [Sat Feb 21 16:31:08.435724 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:31:08.955570 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/we1y8.php [Sat Feb 21 16:31:09.231431 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/iu.php [Sat Feb 21 16:31:10.067054 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/codeboy1877_up.php [Sat Feb 21 16:31:10.335577 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/hehe.php [Sat Feb 21 16:31:10.722550 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/post-data.php [Sat Feb 21 16:31:11.321533 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/w0.php [Sat Feb 21 16:31:11.577838 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/old-index.php [Sat Feb 21 16:31:11.827812 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wsanon.php [Sat Feb 21 16:31:12.241616 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/small.php [Sat Feb 21 16:31:12.575886 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/mode.php [Sat Feb 21 16:31:12.828284 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/indo.php [Sat Feb 21 16:31:13.052729 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/beence.php [Sat Feb 21 16:31:13.272845 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/indosec.php [Sat Feb 21 16:31:13.464813 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/archives.php [Sat Feb 21 16:31:13.738758 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/po8sa.php [Sat Feb 21 16:31:14.429069 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/thesmartestx.php [Sat Feb 21 16:31:14.975274 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/zcanp.php [Sat Feb 21 16:31:16.154523 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/pvt.php [Sat Feb 21 16:31:16.489052 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/shell20211028.php [Sat Feb 21 16:31:16.851364 2026] [cgi:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:31:17.163902 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/crypted.php [Sat Feb 21 16:31:17.462475 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/h0110w4y.php [Sat Feb 21 16:31:17.819024 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/vesiw.php [Sat Feb 21 16:31:18.106984 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/w.php [Sat Feb 21 16:31:18.427121 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-db.php [Sat Feb 21 16:31:18.865935 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/ice.php [Sat Feb 21 16:31:19.162858 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/lx.php [Sat Feb 21 16:31:19.475709 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/lx.php [Sat Feb 21 16:31:19.780873 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/tonant.php [Sat Feb 21 16:31:20.261852 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/f0x.php [Sat Feb 21 16:31:20.463716 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/config.bak.php [Sat Feb 21 16:31:20.725360 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bypass403.php [Sat Feb 21 16:31:20.986201 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/adminer.php [Sat Feb 21 16:31:21.234929 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/allahnaber.php [Sat Feb 21 16:31:21.831410 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/AK-74.php [Sat Feb 21 16:31:22.063924 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfa3.php [Sat Feb 21 16:31:22.320668 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfaindex.php [Sat Feb 21 16:31:22.743049 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfa.php [Sat Feb 21 16:31:22.993475 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/c99.php [Sat Feb 21 16:31:23.225391 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cmd.php [Sat Feb 21 16:31:23.820974 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cw.php [Sat Feb 21 16:31:24.128941 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/date.php [Sat Feb 21 16:31:24.347813 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/haxor.php [Sat Feb 21 16:31:24.574278 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/icomsium.php [Sat Feb 21 16:31:24.881165 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ico.php [Sat Feb 21 16:31:24.957050 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 109.70.100.2:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/join-us/ [Sat Feb 21 16:31:25.266215 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/leaf.php [Sat Feb 21 16:31:25.766587 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/marijuana.php [Sat Feb 21 16:31:26.026679 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mass.php [Sat Feb 21 16:31:26.256732 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mini.php [Sat Feb 21 16:31:26.626837 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/priv8.php [Sat Feb 21 16:31:26.861328 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/pws.php [Sat Feb 21 16:31:28.473654 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/r57.php [Sat Feb 21 16:31:28.736851 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/robots.php [Sat Feb 21 16:31:28.878525 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXkAnBJ1J17V47PDK3bAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 16:31:28.878610 2026] [security2:error] [pid 2087455:tid 2087455] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXkAnBJ1J17V47PDK3bAAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop5%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 16:31:28.987664 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/snd.php [Sat Feb 21 16:31:29.204396 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXkcEeUwbTJVvyvwKQZAAAAAE"] [Sat Feb 21 16:31:29.204454 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXkcEeUwbTJVvyvwKQZAAAAAE"] [Sat Feb 21 16:31:29.237275 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-class.php [Sat Feb 21 16:31:29.829789 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/new-index.php [Sat Feb 21 16:31:30.070774 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/batm.php [Sat Feb 21 16:31:30.256997 2026] [security2:error] [pid 2095811:tid 2095811] [client 52.167.144.162:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZmXktpGmemyPzimpI2MzAAAAAA"] [Sat Feb 21 16:31:30.380817 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/masshp.php [Sat Feb 21 16:31:30.643463 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/alfa.php [Sat Feb 21 16:31:34.407214 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/think.php [Sat Feb 21 16:31:34.668805 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/upspy [Sat Feb 21 16:31:34.957949 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/upspy [Sat Feb 21 16:31:36.268159 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/F0x.php [Sat Feb 21 16:31:36.518461 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/class-wp-widget-archives.php [Sat Feb 21 16:31:39.353408 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xleet-shell.php [Sat Feb 21 16:31:39.586621 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xleet.php [Sat Feb 21 16:31:39.867755 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xleetshell.php [Sat Feb 21 16:31:40.593803 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xlt.php [Sat Feb 21 16:31:41.120130 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/xleet.php [Sat Feb 21 16:31:41.347159 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/xleet-shell.php [Sat Feb 21 16:31:42.150525 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-apxupx.php [Sat Feb 21 16:31:42.438634 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/nf_tracking.php [Sat Feb 21 16:31:42.660318 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/class.api.php [Sat Feb 21 16:31:42.866073 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xl2023.php [Sat Feb 21 16:31:43.093970 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-head.php [Sat Feb 21 16:31:43.374770 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-pano.php [Sat Feb 21 16:31:43.755209 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXn2_8bsSUFLS0rAkmZwAAAAI"] [Sat Feb 21 16:31:43.755336 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXn2_8bsSUFLS0rAkmZwAAAAI"] [Sat Feb 21 16:31:43.940204 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.php [Sat Feb 21 16:31:44.473441 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xmlrpc.php [Sat Feb 21 16:31:44.752503 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin.php [Sat Feb 21 16:31:46.224775 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/WSOEnigma.php [Sat Feb 21 16:31:47.328041 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 16:31:47.659933 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mah.php [Sat Feb 21 16:31:48.029736 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXownBJ1J17V47PDK3kwAAAAU"] [Sat Feb 21 16:31:48.029793 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXownBJ1J17V47PDK3kwAAAAU"] [Sat Feb 21 16:31:48.188686 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/test.php [Sat Feb 21 16:31:48.779146 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/gebase.php [Sat Feb 21 16:31:49.025561 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/defaults.php [Sat Feb 21 16:31:49.347660 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/asasx.php [Sat Feb 21 16:31:49.776997 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXpW_8bsSUFLS0rAkmdAAAAAI"] [Sat Feb 21 16:31:49.777101 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXpW_8bsSUFLS0rAkmdAAAAAI"] [Sat Feb 21 16:31:50.743168 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/contact.php [Sat Feb 21 16:31:51.374079 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/classwithtostring.php [Sat Feb 21 16:31:51.573752 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mah.php [Sat Feb 21 16:31:52.143495 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-add.php [Sat Feb 21 16:31:53.253246 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:31:53.432244 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/403.php [Sat Feb 21 16:31:55.022008 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/text.php [Sat Feb 21 16:31:55.342604 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xc.php [Sat Feb 21 16:31:55.615981 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXq8EeUwbTJVvyvwKQlAAAAAE"] [Sat Feb 21 16:31:55.616067 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXq8EeUwbTJVvyvwKQlAAAAAE"] [Sat Feb 21 16:31:56.159199 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/about.php [Sat Feb 21 16:31:56.419765 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 109.70.100.2:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/gas/ [Sat Feb 21 16:31:56.654366 2026] [cgi:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:31:58.020355 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/go.php [Sat Feb 21 16:31:58.508653 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/byp.php [Sat Feb 21 16:31:59.260852 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/gawean.PhP7 [Sat Feb 21 16:32:00.885521 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/click.php [Sat Feb 21 16:32:01.151658 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/classwithtostring.php [Sat Feb 21 16:32:01.466761 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/about.php [Sat Feb 21 16:32:02.484244 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/baxa1.php [Sat Feb 21 16:32:03.145398 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/in.php [Sat Feb 21 16:32:03.433984 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/geju.php [Sat Feb 21 16:32:04.048311 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-signup.php [Sat Feb 21 16:32:04.364283 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/elp.php [Sat Feb 21 16:32:05.353008 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/chosen-667.php [Sat Feb 21 16:32:05.565618 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/network.php [Sat Feb 21 16:32:05.859112 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/index.php [Sat Feb 21 16:32:06.149734 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-mail.php [Sat Feb 21 16:32:06.440289 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/x.php [Sat Feb 21 16:32:06.746129 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/yanz.php [Sat Feb 21 16:32:07.041789 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/autoload_classmap.php [Sat Feb 21 16:32:07.902543 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 109.70.100.2:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/agent-channel-services/ [Sat Feb 21 16:32:08.039923 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/zmFM.php [Sat Feb 21 16:32:08.373683 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/worm0.PhP7 [Sat Feb 21 16:32:08.644628 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/cong.php [Sat Feb 21 16:32:10.848151 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/tiny.php [Sat Feb 21 16:32:11.450628 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/edit.php [Sat Feb 21 16:32:12.061573 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/first.php [Sat Feb 21 16:32:13.972254 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/autoload_classmap.php [Sat Feb 21 16:32:14.476679 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bs1.php [Sat Feb 21 16:32:15.597102 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXv-xZ8aVGL1GXrWCgbAAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0 [Sat Feb 21 16:32:15.597240 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmXv-xZ8aVGL1GXrWCgbAAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0 [Sat Feb 21 16:32:15.965587 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cron.php [Sat Feb 21 16:32:16.869311 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/db.php [Sat Feb 21 16:32:16.918476 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 109.70.100.2:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/broadband-services/ [Sat Feb 21 16:32:17.118506 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/fm.php [Sat Feb 21 16:32:18.044213 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/a.php [Sat Feb 21 16:32:19.570019 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/chosen.php [Sat Feb 21 16:32:20.421541 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/back.php [Sat Feb 21 16:32:22.432360 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/new.php [Sat Feb 21 16:32:22.666079 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/wp-conflg.php [Sat Feb 21 16:32:23.443220 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/phpfm3.php [Sat Feb 21 16:32:24.859536 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/post.php [Sat Feb 21 16:32:25.404834 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 109.70.100.10:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/ [Sat Feb 21 16:32:25.526867 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/file.php [Sat Feb 21 16:32:25.827316 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/index.php [Sat Feb 21 16:32:26.634850 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/chosen.php [Sat Feb 21 16:32:27.569937 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/randkeyword.php [Sat Feb 21 16:32:28.063509 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/1.php [Sat Feb 21 16:32:28.337656 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xxx.php [Sat Feb 21 16:32:29.671420 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/lv.php [Sat Feb 21 16:32:30.247905 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/zip.php [Sat Feb 21 16:32:31.623965 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/index.php [Sat Feb 21 16:32:31.624653 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/index.php5 [Sat Feb 21 16:32:31.626698 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/index.phtml [Sat Feb 21 16:32:34.269832 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/themes.php [Sat Feb 21 16:32:34.544328 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-cron.php [Sat Feb 21 16:32:35.380964 2026] [cgi:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:32:35.618780 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 109.70.100.10:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/businesses-waste-energy-with-these-common-mistakes/ [Sat Feb 21 16:32:35.663458 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/jp.php [Sat Feb 21 16:32:36.022880 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/rcc.php [Sat Feb 21 16:32:37.332129 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/class.api.php [Sat Feb 21 16:32:37.332739 2026] [security2:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/class.api.php"] [unique_id "aZmX1exZ8aVGL1GXrWCgiAAAAF8"] [Sat Feb 21 16:32:37.332784 2026] [security2:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/class.api.php"] [unique_id "aZmX1exZ8aVGL1GXrWCgiAAAAF8"] [Sat Feb 21 16:32:37.625308 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/layout.php [Sat Feb 21 16:32:37.838825 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX1exZ8aVGL1GXrWCgiQAAAF8"] [Sat Feb 21 16:32:37.838874 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX1exZ8aVGL1GXrWCgiQAAAF8"] [Sat Feb 21 16:32:38.153925 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/history.php [Sat Feb 21 16:32:38.734420 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 16:32:39.995245 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX12_8bsSUFLS0rAkmrQAAAAI"] [Sat Feb 21 16:32:39.995294 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX12_8bsSUFLS0rAkmrQAAAAI"] [Sat Feb 21 16:32:40.464492 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/about.php [Sat Feb 21 16:32:41.268890 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cong.php [Sat Feb 21 16:32:41.361894 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX2dqfQ3heRoVdf2nIQgAAAAM"] [Sat Feb 21 16:32:41.361995 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX2dqfQ3heRoVdf2nIQgAAAAM"] [Sat Feb 21 16:32:41.473871 2026] [cgi:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:32:42.624835 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-links.php [Sat Feb 21 16:32:42.917096 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/makeasmtp.php [Sat Feb 21 16:32:43.173577 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/classwithtostring.php [Sat Feb 21 16:32:43.267817 2026] [security2:error] [pid 2102026:tid 2102026] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX23qETShEIzrKOv8GewAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 16:32:43.267940 2026] [security2:error] [pid 2102026:tid 2102026] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX23qETShEIzrKOv8GewAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 16:32:43.777389 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/randkeyword.PhP7 [Sat Feb 21 16:32:44.048709 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/login.php [Sat Feb 21 16:32:46.431818 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/autoload_classmap.php [Sat Feb 21 16:32:46.669837 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/about.php [Sat Feb 21 16:32:47.260855 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wander.php [Sat Feb 21 16:32:47.577346 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX39pGmemyPzimpI2NNAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1 [Sat Feb 21 16:32:47.607012 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX39pGmemyPzimpI2NNAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1 [Sat Feb 21 16:32:48.769250 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-config-sample.php [Sat Feb 21 16:32:49.358083 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 109.70.100.10:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/businesses-waste-energy-with-these-common-mistakes/ [Sat Feb 21 16:32:50.277584 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/manager.php [Sat Feb 21 16:32:50.806305 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX4uxZ8aVGL1GXrWCgoAAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:32:50.806377 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmX4uxZ8aVGL1GXrWCgoAAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:32:50.825656 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.php [Sat Feb 21 16:32:50.825895 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.php5 [Sat Feb 21 16:32:50.826331 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.phtml [Sat Feb 21 16:32:51.071687 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/users.php [Sat Feb 21 16:32:51.865466 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sim.php [Sat Feb 21 16:32:52.769552 2026] [access_compat:error] [pid 2102026:tid 2102026] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/file.php [Sat Feb 21 16:32:53.021502 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/function.php [Sat Feb 21 16:32:57.756756 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-mail.php [Sat Feb 21 16:32:58.766198 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/accah.php [Sat Feb 21 16:32:59.031136 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/admin-post.php [Sat Feb 21 16:32:59.267423 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/conf_upload.php [Sat Feb 21 16:32:59.907875 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:33:00.441058 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/wp-conflg.php [Sat Feb 21 16:33:00.788288 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/hello.php [Sat Feb 21 16:33:01.360209 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-configs.php [Sat Feb 21 16:33:02.276428 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/license.php [Sat Feb 21 16:33:02.522593 2026] [cgi:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:33:02.773582 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/f35.php [Sat Feb 21 16:33:03.622121 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/edit.php [Sat Feb 21 16:33:03.873841 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/license.php [Sat Feb 21 16:33:04.360265 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/files.php [Sat Feb 21 16:33:04.565786 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/webadmin.php [Sat Feb 21 16:33:05.926171 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wsa.php [Sat Feb 21 16:33:06.241804 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/tinyfilemanager.php [Sat Feb 21 16:33:07.142809 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/json.php [Sat Feb 21 16:33:07.597960 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 89.58.41.156:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/author/admin/ [Sat Feb 21 16:33:08.341772 2026] [cgi:error] [pid 2102026:tid 2102026] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:33:08.628914 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/woh.php [Sat Feb 21 16:33:09.361015 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bless.php [Sat Feb 21 16:33:09.659124 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-trackback.php [Sat Feb 21 16:33:09.952646 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/info.php [Sat Feb 21 16:33:10.626724 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:33:10.749838 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/buy.php [Sat Feb 21 16:33:11.274751 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/readme.php [Sat Feb 21 16:33:11.533097 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sck.php [Sat Feb 21 16:33:11.766126 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/fm.php [Sat Feb 21 16:33:12.044906 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/blue.php [Sat Feb 21 16:33:12.327821 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/packed.php [Sat Feb 21 16:33:12.646268 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/about.php [Sat Feb 21 16:33:13.462130 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/wp-login.php [Sat Feb 21 16:33:13.740559 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/plugin.php [Sat Feb 21 16:33:14.429910 2026] [authz_core:error] [pid 2087455:tid 2087455] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/wpcf7_uploads/, referer: binance.com [Sat Feb 21 16:33:14.441871 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 84.247.187.54:0] AH01797: client denied by server configuration: /home/despvt/public_html/wp-content/uploads/woocommerce_uploads/, referer: binance.com [Sat Feb 21 16:33:14.469330 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/autoload_classmap.php [Sat Feb 21 16:33:14.752289 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/chosen.php [Sat Feb 21 16:33:15.325895 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/load.php [Sat Feb 21 16:33:15.478724 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 89.58.41.156:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/electricity/ [Sat Feb 21 16:33:15.935658 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/edit-tags.php [Sat Feb 21 16:33:16.544920 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/saka.phP7 [Sat Feb 21 16:33:16.746415 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/autoload_classmap.php [Sat Feb 21 16:33:17.285521 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/lock.php [Sat Feb 21 16:33:17.642325 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/cloud.php [Sat Feb 21 16:33:17.955740 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/wp-conflg.php [Sat Feb 21 16:33:18.130729 2026] [cgi:error] [pid 2094605:tid 2094605] [client 41.56.248.251:0] AH02812: stderr from /home/mastercommnet/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://www.mastercomm.net.pk/ [Sat Feb 21 16:33:19.261657 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/product.php [Sat Feb 21 16:33:19.519518 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/class_api.php [Sat Feb 21 16:33:19.758055 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/item.php [Sat Feb 21 16:33:20.398678 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/base.php [Sat Feb 21 16:33:21.031425 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/mah.php [Sat Feb 21 16:33:21.325017 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/zero.php [Sat Feb 21 16:33:22.187694 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYAgnBJ1J17V47PDK4HAAAAAU"] [Sat Feb 21 16:33:22.187838 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYAgnBJ1J17V47PDK4HAAAAAU"] [Sat Feb 21 16:33:22.448206 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/style.php [Sat Feb 21 16:33:23.066442 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/db.php [Sat Feb 21 16:33:23.360020 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/wp-login.php [Sat Feb 21 16:33:23.571731 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/options.php [Sat Feb 21 16:33:23.826332 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugin.php [Sat Feb 21 16:33:23.964856 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYA-xZ8aVGL1GXrWCg3QAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:33:23.964950 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYA-xZ8aVGL1GXrWCg3QAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:33:24.126547 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-set.php [Sat Feb 21 16:33:24.420796 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/file.php [Sat Feb 21 16:33:25.298958 2026] [security2:error] [pid 2094605:tid 2094605] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYBWKPMemw-Pg12QGqaAAAAEk"] [Sat Feb 21 16:33:25.299016 2026] [security2:error] [pid 2094605:tid 2094605] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYBWKPMemw-Pg12QGqaAAAAEk"] [Sat Feb 21 16:33:26.159816 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/function.php [Sat Feb 21 16:33:26.731442 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/radio.php [Sat Feb 21 16:33:27.122979 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/bak.php [Sat Feb 21 16:33:27.363778 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/cong.php [Sat Feb 21 16:33:27.972808 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/file.php [Sat Feb 21 16:33:29.437627 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/moon.php [Sat Feb 21 16:33:30.049884 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/aves.php [Sat Feb 21 16:33:32.124852 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/install.php [Sat Feb 21 16:33:32.428758 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/pages.php [Sat Feb 21 16:33:32.773201 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bulk.php [Sat Feb 21 16:33:33.047896 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/kk.php [Sat Feb 21 16:33:33.746827 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-logout.php [Sat Feb 21 16:33:34.734768 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/classwithtostring.php [Sat Feb 21 16:33:34.741461 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYDkgDADwSahU77SdAPAAAABY"] [Sat Feb 21 16:33:34.741553 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYDkgDADwSahU77SdAPAAAABY"] [Sat Feb 21 16:33:34.957941 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-setup.php [Sat Feb 21 16:33:35.210305 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYD5Ic0jUtQ5GGa5T8NwAAADQ"] [Sat Feb 21 16:33:35.210433 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYD5Ic0jUtQ5GGa5T8NwAAADQ"] [Sat Feb 21 16:33:36.170626 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-editor.php [Sat Feb 21 16:33:36.469434 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-simple.php [Sat Feb 21 16:33:36.821687 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/classwithtostring.php [Sat Feb 21 16:33:37.266492 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/radio.php [Sat Feb 21 16:33:38.063752 2026] [authz_core:error] [pid 2095811:tid 2095811] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-admin/includes/error_log, referer: binance.com [Sat Feb 21 16:33:40.243495 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/hehehehe.php [Sat Feb 21 16:33:40.851998 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/pgs.phP7 [Sat Feb 21 16:33:40.977846 2026] [security2:error] [pid 2094502:tid 2094502] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYFBR3sXRiriItBpdNgQAAACM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 16:33:40.977940 2026] [security2:error] [pid 2094502:tid 2094502] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYFBR3sXRiriItBpdNgQAAACM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 16:33:43.676586 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/header.php [Sat Feb 21 16:33:43.941741 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/gecko.php [Sat Feb 21 16:33:45.149196 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bk.php [Sat Feb 21 16:33:46.251733 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/moon.php [Sat Feb 21 16:33:46.750568 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/config.php [Sat Feb 21 16:33:46.947273 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 86.54.28.49:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/why-utilities-are-forcing-you-to-install-a-smart-meter/ [Sat Feb 21 16:33:46.989045 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/dropdown.php [Sat Feb 21 16:33:47.827316 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/about.php [Sat Feb 21 16:33:48.064162 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sym.php [Sat Feb 21 16:33:49.022511 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/hello.php [Sat Feb 21 16:33:49.269309 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/file.php [Sat Feb 21 16:33:49.270156 2026] [security2:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/wp-content/uploads/file.php"] [unique_id "aZmYHW_8bsSUFLS0rAknEwAAAAI"] [Sat Feb 21 16:33:49.270197 2026] [security2:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/wp-content/uploads/file.php"] [unique_id "aZmYHW_8bsSUFLS0rAknEwAAAAI"] [Sat Feb 21 16:33:50.017828 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sk.php [Sat Feb 21 16:33:50.538169 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/x.php [Sat Feb 21 16:33:51.142232 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/blurbs.php [Sat Feb 21 16:33:52.921139 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/about.php [Sat Feb 21 16:33:54.665662 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sys.php [Sat Feb 21 16:33:55.218966 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYI-xZ8aVGL1GXrWChCgAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:33:55.219022 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYI-xZ8aVGL1GXrWChCgAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:33:55.705483 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-user.php [Sat Feb 21 16:33:55.954202 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/customize.php [Sat Feb 21 16:33:56.220109 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/content.php [Sat Feb 21 16:33:56.221051 2026] [security2:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aZmYJGKPMemw-Pg12QGqlwAAAEk"] [Sat Feb 21 16:33:56.221349 2026] [security2:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/.well-known/acme-challenge/content.php"] [unique_id "aZmYJGKPMemw-Pg12QGqlwAAAEk"] [Sat Feb 21 16:33:56.766390 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/doc.php [Sat Feb 21 16:33:57.032298 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/fm1.php [Sat Feb 21 16:33:58.375665 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 86.54.28.49:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/5-things-to-know-before-a-demand-response-event/ [Sat Feb 21 16:33:58.523678 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-settings.php [Sat Feb 21 16:33:58.959720 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-file.php [Sat Feb 21 16:33:59.173860 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content.php [Sat Feb 21 16:33:59.659117 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/log.php [Sat Feb 21 16:33:59.906739 2026] [authz_core:error] [pid 2094641:tid 2094641] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-admin/maint/error_log, referer: binance.com [Sat Feb 21 16:34:00.924583 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ioxi01.php [Sat Feb 21 16:34:03.642602 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/wp-atom.php [Sat Feb 21 16:34:04.009351 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 16:34:04.009464 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 16:34:04.009521 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 16:34:04.009718 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 16:34:04.009744 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 16:34:04.009776 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 16:34:04.010308 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 16:34:04.010351 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 16:34:04.010410 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 16:34:04.010462 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 16:34:04.010500 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 16:34:04.010585 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 16:34:04.010625 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 16:34:04.010670 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 16:34:04.010707 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 16:34:04.010735 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 16:34:04.011423 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 16:34:04.011478 2026] [authz_core:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 16:34:04.011514 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 16:34:04.011554 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 16:34:04.011580 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 16:34:04.011607 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 16:34:04.011645 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 16:34:04.011683 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 16:34:04.011710 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 16:34:04.011753 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 16:34:04.011811 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 16:34:04.011898 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 16:34:04.011929 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 16:34:04.690422 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYLEgDADwSahU77SdAYgAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:34:04.690526 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYLEgDADwSahU77SdAYgAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:34:04.712491 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 16:34:04.712555 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 16:34:04.712579 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 16:34:04.712662 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 16:34:04.712679 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 16:34:04.712693 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 16:34:04.712776 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 16:34:04.712792 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 16:34:04.712807 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 16:34:04.712820 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 16:34:04.712833 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 16:34:04.712876 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 16:34:04.712889 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 16:34:04.712902 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 16:34:04.712916 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 16:34:04.712930 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 16:34:04.713113 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 16:34:04.713153 2026] [authz_core:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 16:34:04.713183 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 16:34:04.713209 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 16:34:04.713262 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 16:34:04.713289 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 16:34:04.713317 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 16:34:04.713343 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 16:34:04.713370 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 16:34:04.713409 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 16:34:04.713432 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 16:34:04.713499 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 16:34:04.713524 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 146.70.185.32:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 16:34:05.417978 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xx.php [Sat Feb 21 16:34:05.748497 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.php [Sat Feb 21 16:34:06.032976 2026] [cgi:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:34:07.128915 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYL8EeUwbTJVvyvwKRVwAAAAE"] [Sat Feb 21 16:34:07.128992 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYL8EeUwbTJVvyvwKRVwAAAAE"] [Sat Feb 21 16:34:07.186664 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/Ex34L.php [Sat Feb 21 16:34:08.775857 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/images.php [Sat Feb 21 16:34:09.038673 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-aespa.php [Sat Feb 21 16:34:09.659243 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYMdpGmemyPzimpI2NugAAAAA"] [Sat Feb 21 16:34:09.659328 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYMdpGmemyPzimpI2NugAAAAA"] [Sat Feb 21 16:34:09.964650 2026] [cgi:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:34:10.756985 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/include.php [Sat Feb 21 16:34:11.365077 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/mariju.php [Sat Feb 21 16:34:11.665319 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/product.php [Sat Feb 21 16:34:11.688091 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYM2_8bsSUFLS0rAknOAAAAAI"] [Sat Feb 21 16:34:11.688183 2026] [security2:error] [pid 2099532:tid 2099532] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYM2_8bsSUFLS0rAknOAAAAAI"] [Sat Feb 21 16:34:12.570227 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/themes.php [Sat Feb 21 16:34:15.183536 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-l0gin.php [Sat Feb 21 16:34:16.065458 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/wp-login.php [Sat Feb 21 16:34:16.336116 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/bosctspi.php [Sat Feb 21 16:34:16.820600 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/atomlib.php [Sat Feb 21 16:34:17.347000 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-conflg.php [Sat Feb 21 16:34:18.265902 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/defaults.php [Sat Feb 21 16:34:20.172173 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/parx.php [Sat Feb 21 16:34:20.518517 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/baxa1.phP7 [Sat Feb 21 16:34:21.071351 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/xoxo.php [Sat Feb 21 16:34:21.477483 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/about.php [Sat Feb 21 16:34:21.478149 2026] [security2:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aZmYPW_8bsSUFLS0rAknSAAAAAI"] [Sat Feb 21 16:34:21.478187 2026] [security2:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aZmYPW_8bsSUFLS0rAknSAAAAAI"] [Sat Feb 21 16:34:21.831561 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/0x.php [Sat Feb 21 16:34:22.396059 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYPsEeUwbTJVvyvwKRcgAAAAE"] [Sat Feb 21 16:34:22.396141 2026] [security2:error] [pid 2097018:tid 2097018] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYPsEeUwbTJVvyvwKRcgAAAAE"] [Sat Feb 21 16:34:23.121682 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wpn.php [Sat Feb 21 16:34:23.430897 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cloud.php [Sat Feb 21 16:34:23.767657 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/upload.php [Sat Feb 21 16:34:24.537538 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/init.php [Sat Feb 21 16:34:24.832048 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/users.php [Sat Feb 21 16:34:25.156037 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-blog.php [Sat Feb 21 16:34:25.928346 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYQdpGmemyPzimpI2N1gAAAAA"] [Sat Feb 21 16:34:25.928448 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYQdpGmemyPzimpI2N1gAAAAA"] [Sat Feb 21 16:34:26.832592 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/payout.php [Sat Feb 21 16:34:27.463422 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/lock360.php [Sat Feb 21 16:34:28.077124 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/x.php [Sat Feb 21 16:34:28.363448 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp_info.php [Sat Feb 21 16:34:28.566596 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/upload.php [Sat Feb 21 16:34:28.768161 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/xml.php [Sat Feb 21 16:34:29.041711 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/by.php [Sat Feb 21 16:34:30.644748 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/alfa.php [Sat Feb 21 16:34:30.673794 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYRkgDADwSahU77SdAlAAAABY"] [Sat Feb 21 16:34:30.673883 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYRkgDADwSahU77SdAlAAAABY"] [Sat Feb 21 16:34:30.941889 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/up.php [Sat Feb 21 16:34:31.243903 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/dropdown.php [Sat Feb 21 16:34:32.973166 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/default.php [Sat Feb 21 16:34:33.227434 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/fox.php [Sat Feb 21 16:34:33.522623 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/google.php [Sat Feb 21 16:34:33.823086 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/setup-config.php [Sat Feb 21 16:34:34.154133 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ovatools.php [Sat Feb 21 16:34:34.408508 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sidwso.php [Sat Feb 21 16:34:34.683343 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/worksec.php [Sat Feb 21 16:34:36.393589 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/Simple.php [Sat Feb 21 16:34:36.719993 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-blog-header.php [Sat Feb 21 16:34:36.957095 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/style2.php [Sat Feb 21 16:34:37.507805 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYTdqfQ3heRoVdf2nJAAAAAAM"] [Sat Feb 21 16:34:37.507898 2026] [security2:error] [pid 2100917:tid 2100917] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYTdqfQ3heRoVdf2nJAAAAAAM"] [Sat Feb 21 16:34:37.541403 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-scripts.php [Sat Feb 21 16:34:37.767644 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/adminfuns.php [Sat Feb 21 16:34:38.028601 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cjfuns.php [Sat Feb 21 16:34:38.260878 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/comfunctions.php [Sat Feb 21 16:34:38.550637 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/delpaths.php [Sat Feb 21 16:34:38.864287 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/epinyins.php [Sat Feb 21 16:34:39.106089 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/filefuns.php [Sat Feb 21 16:34:39.368482 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYT9qfQ3heRoVdf2nJBAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 16:34:39.368594 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYT9qfQ3heRoVdf2nJBAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 16:34:39.380025 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/hinfofuns.php [Sat Feb 21 16:34:39.624597 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/qfunctions.php [Sat Feb 21 16:34:39.928114 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/qinfofuns.php [Sat Feb 21 16:34:40.273846 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/thoms.php [Sat Feb 21 16:34:40.484072 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/postnews.php [Sat Feb 21 16:34:40.719539 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/admin-ajax.php [Sat Feb 21 16:34:40.968326 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/link.php [Sat Feb 21 16:34:41.188716 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ms-themes.php [Sat Feb 21 16:34:41.473770 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/my-sites.php [Sat Feb 21 16:34:41.758710 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/media.php [Sat Feb 21 16:34:42.070037 2026] [security2:error] [pid 2094605:tid 2094605] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYUWKPMemw-Pg12QGq7AAAAEk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:34:42.070152 2026] [security2:error] [pid 2094605:tid 2094605] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYUWKPMemw-Pg12QGq7AAAAEk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:34:42.323204 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/nav-menus.php [Sat Feb 21 16:34:42.582455 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/menu.php [Sat Feb 21 16:34:42.841470 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-head.php [Sat Feb 21 16:34:43.059178 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/revision.php [Sat Feb 21 16:34:43.331775 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/widgets.php [Sat Feb 21 16:34:43.935946 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/term.php [Sat Feb 21 16:34:44.182413 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/system_log.php [Sat Feb 21 16:34:44.427340 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/atomlib.php [Sat Feb 21 16:34:44.720001 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/moded.php [Sat Feb 21 16:34:44.870773 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYVAnBJ1J17V47PDK4rwAAAAU"] [Sat Feb 21 16:34:44.870885 2026] [security2:error] [pid 2087455:tid 2087455] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYVAnBJ1J17V47PDK4rwAAAAU"] [Sat Feb 21 16:34:45.244922 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYVexZ8aVGL1GXrWChWwAAAF8"] [Sat Feb 21 16:34:45.245174 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYVexZ8aVGL1GXrWChWwAAAF8"] [Sat Feb 21 16:34:45.418248 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/upgrade.php [Sat Feb 21 16:34:45.623221 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/gh.php [Sat Feb 21 16:34:45.921031 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/version.php [Sat Feb 21 16:34:46.181875 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/head.php [Sat Feb 21 16:34:46.421165 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/index1.php [Sat Feb 21 16:34:46.822900 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/theme-insqbzk.php [Sat Feb 21 16:34:47.080170 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/good.php [Sat Feb 21 16:34:47.326233 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/main.php [Sat Feb 21 16:34:47.923987 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wsoyanz.php [Sat Feb 21 16:34:49.181052 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/updates.php [Sat Feb 21 16:34:49.336837 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYWexZ8aVGL1GXrWChYwAAAF8"] [Sat Feb 21 16:34:49.336901 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYWexZ8aVGL1GXrWChYwAAAF8"] [Sat Feb 21 16:34:50.118547 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/alfa-rex.php [Sat Feb 21 16:34:50.860422 2026] [cgi:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:34:52.593337 2026] [security2:error] [pid 2094502:tid 2094502] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "mail.alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmYWxR3sXRiriItBpdN-wAAACM"] [Sat Feb 21 16:34:52.593400 2026] [security2:error] [pid 2094502:tid 2094502] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "mail.alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmYWxR3sXRiriItBpdN-wAAACM"] [Sat Feb 21 16:34:52.836347 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/cloud.php [Sat Feb 21 16:34:52.846018 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYXJIc0jUtQ5GGa5T8uAAAADQ"] [Sat Feb 21 16:34:52.846121 2026] [security2:error] [pid 2094542:tid 2094542] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYXJIc0jUtQ5GGa5T8uAAAADQ"] [Sat Feb 21 16:34:53.068962 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/wso112233.php [Sat Feb 21 16:34:54.032850 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/bala.php [Sat Feb 21 16:34:54.324156 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/dropdown.php [Sat Feb 21 16:34:55.247196 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/repeater.php [Sat Feb 21 16:34:56.146249 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/repeater.php [Sat Feb 21 16:34:57.150468 2026] [security2:error] [pid 2094502:tid 2094502] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "mail.alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmYXxR3sXRiriItBpdN_gAAACM"] [Sat Feb 21 16:34:57.150562 2026] [security2:error] [pid 2094502:tid 2094502] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "mail.alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmYXxR3sXRiriItBpdN_gAAACM"] [Sat Feb 21 16:34:57.330041 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cache-compat.php [Sat Feb 21 16:34:57.641860 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ajax-actions.php [Sat Feb 21 16:34:58.028075 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/ajax-actions.php [Sat Feb 21 16:34:58.253094 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-consar.php [Sat Feb 21 16:35:00.232561 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/style-css.php [Sat Feb 21 16:35:00.524183 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/wp-configs.php [Sat Feb 21 16:35:01.465754 2026] [cgi:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:35:02.055561 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sx.php [Sat Feb 21 16:35:02.745401 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/content.php [Sat Feb 21 16:35:02.977197 2026] [security2:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "master-comm.net"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aZmYZtqfQ3heRoVdf2nJIwAAAAM"] [Sat Feb 21 16:35:04.198434 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.php [Sat Feb 21 16:35:04.719965 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/web.php [Sat Feb 21 16:35:06.323965 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-uploads-config.php [Sat Feb 21 16:35:08.042674 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/autoload_classmap.php [Sat Feb 21 16:35:08.043528 2026] [security2:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/.well-known/acme-challenge/autoload_classmap.php"] [unique_id "aZmYbJIc0jUtQ5GGa5T8wwAAADQ"] [Sat Feb 21 16:35:08.043579 2026] [security2:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/.well-known/acme-challenge/autoload_classmap.php"] [unique_id "aZmYbJIc0jUtQ5GGa5T8wwAAADQ"] [Sat Feb 21 16:35:08.311070 2026] [security2:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aZmYbMEeUwbTJVvyvwKRswAAAAE"] [Sat Feb 21 16:35:08.311129 2026] [security2:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aZmYbMEeUwbTJVvyvwKRswAAAAE"] [Sat Feb 21 16:35:08.559152 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/upload.php [Sat Feb 21 16:35:10.267062 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/indeex.php [Sat Feb 21 16:35:10.571601 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/dropdown.php [Sat Feb 21 16:35:11.755489 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bs.php [Sat Feb 21 16:35:12.577175 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/credits.php [Sat Feb 21 16:35:12.938783 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/edit-comments.php [Sat Feb 21 16:35:13.239259 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/checkbox.php [Sat Feb 21 16:35:13.502019 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/export.php [Sat Feb 21 16:35:13.749344 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/input.php [Sat Feb 21 16:35:14.039111 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/load-scripts.php [Sat Feb 21 16:35:14.637854 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/load-styles.php [Sat Feb 21 16:35:14.903046 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-discussion.php [Sat Feb 21 16:35:14.986719 2026] [security2:error] [pid 2103929:tid 2103929] [client 173.239.214.113:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmYcoCwuix9g9XYXgPbfAAAAAQ"] [Sat Feb 21 16:35:14.986813 2026] [security2:error] [pid 2103929:tid 2103929] [client 173.239.214.113:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmYcoCwuix9g9XYXgPbfAAAAAQ"] [Sat Feb 21 16:35:15.173434 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:35:15.329589 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-general.php [Sat Feb 21 16:35:15.628930 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-permalink.php [Sat Feb 21 16:35:15.868944 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-privacy.php [Sat Feb 21 16:35:16.081860 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-reading.php [Sat Feb 21 16:35:16.362386 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/options-writing.php [Sat Feb 21 16:35:16.662347 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/post-new.php [Sat Feb 21 16:35:17.029277 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/privacy.php [Sat Feb 21 16:35:17.635278 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/profile.php [Sat Feb 21 16:35:17.920425 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/site-health.php [Sat Feb 21 16:35:18.158110 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/tools.php [Sat Feb 21 16:35:18.440830 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/update-core.php [Sat Feb 21 16:35:18.755916 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/user-edit.php [Sat Feb 21 16:35:19.520413 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/user-new.php [Sat Feb 21 16:35:19.768632 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-cron.php [Sat Feb 21 16:35:20.157164 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/bar.php [Sat Feb 21 16:35:20.640884 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/samll.php [Sat Feb 21 16:35:21.260336 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/webdb.php [Sat Feb 21 16:35:21.547170 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/100.php [Sat Feb 21 16:35:22.133405 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/plugin-install.php [Sat Feb 21 16:35:22.379268 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/km.php [Sat Feb 21 16:35:22.633765 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/LA.php [Sat Feb 21 16:35:22.742382 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:35:22.864278 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-good.php [Sat Feb 21 16:35:23.120151 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-ldd.php [Sat Feb 21 16:35:23.425334 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sgd.php [Sat Feb 21 16:35:23.657442 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wzy.php [Sat Feb 21 16:35:24.241773 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ioxi002.PhP7 [Sat Feb 21 16:35:24.718738 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/chosen.php [Sat Feb 21 16:35:25.836575 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-signup.php [Sat Feb 21 16:35:27.129554 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/class.php [Sat Feb 21 16:35:27.771441 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/Njima.php [Sat Feb 21 16:35:28.022899 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ynz.PhP7 [Sat Feb 21 16:35:28.086347 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:29.050666 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/FroggBaba.php [Sat Feb 21 16:35:30.900086 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sts.php [Sat Feb 21 16:35:31.731864 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/install.php [Sat Feb 21 16:35:31.944484 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/wp-cron.php [Sat Feb 21 16:35:32.150271 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:32.540304 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/st.php [Sat Feb 21 16:35:33.127549 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/GA13.php [Sat Feb 21 16:35:33.638909 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/shell20211028.php [Sat Feb 21 16:35:33.673331 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:33.898564 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/tmpls.php [Sat Feb 21 16:35:34.297454 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:34.835477 2026] [security2:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZmYhhR3sXRiriItBpdOHwAAACM"] [Sat Feb 21 16:35:34.835545 2026] [security2:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZmYhhR3sXRiriItBpdOHwAAACM"] [Sat Feb 21 16:35:35.532619 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/crop.php [Sat Feb 21 16:35:35.663240 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:36.182358 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:36.384855 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/gali.php [Sat Feb 21 16:35:36.651378 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/wso.php [Sat Feb 21 16:35:37.471589 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/dir.php [Sat Feb 21 16:35:37.774621 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/dirs.php [Sat Feb 21 16:35:38.081862 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:38.093011 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/abouts.php [Sat Feb 21 16:35:38.360281 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/malls.php [Sat Feb 21 16:35:38.455135 2026] [security2:error] [pid 2094542:tid 2094542] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-global": Permission denied [hostname "medimage.com.pk"] [uri "/wp-cron.php"] [unique_id "aZmYipIc0jUtQ5GGa5T83gAAADQ"] [Sat Feb 21 16:35:38.455217 2026] [security2:error] [pid 2094542:tid 2094542] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-ip": Permission denied [hostname "medimage.com.pk"] [uri "/wp-cron.php"] [unique_id "aZmYipIc0jUtQ5GGa5T83gAAADQ"] [Sat Feb 21 16:35:38.643935 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/liefs.php [Sat Feb 21 16:35:39.228852 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/uc.php [Sat Feb 21 16:35:39.541755 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/locks.php [Sat Feb 21 16:35:39.701362 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:39.820298 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-dsdd.php [Sat Feb 21 16:35:41.664280 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-themes.php [Sat Feb 21 16:35:41.731897 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:41.931793 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-uploads.php [Sat Feb 21 16:35:42.176812 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-files.php [Sat Feb 21 16:35:42.453504 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/t.php [Sat Feb 21 16:35:43.070401 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/stindex.php [Sat Feb 21 16:35:43.261329 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/shop.php [Sat Feb 21 16:35:43.356492 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:35:43.825519 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:43.855552 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/exit.php [Sat Feb 21 16:35:44.081870 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/install.php [Sat Feb 21 16:35:44.335508 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/max.php [Sat Feb 21 16:35:44.547749 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-load.php [Sat Feb 21 16:35:45.319735 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/aa.php [Sat Feb 21 16:35:45.936225 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/worm3.PhP7 [Sat Feb 21 16:35:46.170836 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/shellv3.php [Sat Feb 21 16:35:46.369918 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/sh.php [Sat Feb 21 16:35:46.653034 2026] [cgi:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:35:46.878511 2026] [cgi:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:35:47.143695 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/function.php [Sat Feb 21 16:35:47.435363 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/m.php [Sat Feb 21 16:35:47.721732 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/delete3.php [Sat Feb 21 16:35:47.976667 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 16:35:48.172776 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mm.php [Sat Feb 21 16:35:48.736553 2026] [cgi:error] [pid 2094465:tid 2094465] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:35:49.157807 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/server.php [Sat Feb 21 16:35:49.676680 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/mailer.php [Sat Feb 21 16:35:49.929282 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/www.php [Sat Feb 21 16:35:50.359847 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/cache.php [Sat Feb 21 16:35:50.564516 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/dropdown.php [Sat Feb 21 16:35:51.043935 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-header.php [Sat Feb 21 16:35:51.330152 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/shop.php [Sat Feb 21 16:35:51.926784 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/ioxi001.PhP7 [Sat Feb 21 16:35:52.195329 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.php [Sat Feb 21 16:35:52.195668 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.php5 [Sat Feb 21 16:35:52.196101 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/index.phtml [Sat Feb 21 16:35:52.689540 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/index.php [Sat Feb 21 16:35:52.689925 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/index.php5 [Sat Feb 21 16:35:52.690646 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/.well-known/acme-challenge/index.phtml [Sat Feb 21 16:35:53.235495 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/index.php [Sat Feb 21 16:35:53.235816 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/index.php5 [Sat Feb 21 16:35:53.236384 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/uploads/index.phtml [Sat Feb 21 16:35:54.328533 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:54.418867 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/index.php [Sat Feb 21 16:35:54.419085 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/index.php5 [Sat Feb 21 16:35:54.419436 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-admin/index.phtml [Sat Feb 21 16:35:55.309444 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYm9pGmemyPzimpI2OOwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:35:55.309548 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYm9pGmemyPzimpI2OOwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:35:56.778443 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:58.412403 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:35:59.892093 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:00.500020 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:03.164269 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:03.195895 2026] [security2:error] [pid 2097018:tid 2097018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYo8EeUwbTJVvyvwKR5QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:36:03.196039 2026] [security2:error] [pid 2097018:tid 2097018] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmYo8EeUwbTJVvyvwKR5QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:36:03.480731 2026] [access_compat:error] [pid 2094542:tid 2094542] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:04.966404 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:06.228935 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/index.php [Sat Feb 21 16:36:06.229349 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/index.php5 [Sat Feb 21 16:36:06.229976 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.132:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/index.phtml [Sat Feb 21 16:36:06.833207 2026] [cgi:error] [pid 2094641:tid 2094641] [client 194.5.82.132:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:36:08.537991 2026] [access_compat:error] [pid 2100917:tid 2100917] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:09.763348 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:36:14.808155 2026] [access_compat:error] [pid 2087455:tid 2087455] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 16:36:16.240936 2026] [security2:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/wp-includes/images/smilies/"] [unique_id "aZmYsNpGmemyPzimpI2OSAAAAAA"] [Sat Feb 21 16:36:16.241009 2026] [security2:error] [pid 2095811:tid 2095811] [client 194.5.82.132:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/wp-includes/images/smilies/"] [unique_id "aZmYsNpGmemyPzimpI2OSAAAAAA"] [Sat Feb 21 16:36:29.396791 2026] [authz_core:error] [pid 2100917:tid 2100917] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/error_log, referer: binance.com [Sat Feb 21 16:36:29.867473 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:36:32.868565 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/index.php [Sat Feb 21 16:36:32.868934 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/index.php5 [Sat Feb 21 16:36:32.869619 2026] [access_compat:error] [pid 2094502:tid 2094502] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/index.phtml [Sat Feb 21 16:36:37.316386 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.php [Sat Feb 21 16:36:37.318237 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.php5 [Sat Feb 21 16:36:37.319103 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/wp-content/plugins/index.phtml [Sat Feb 21 16:36:40.961404 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 16:36:43.885264 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:36:46.976802 2026] [security2:error] [pid 2094502:tid 2094502] [client 194.5.82.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/wp-content/uploads/typehub/custom/"] [unique_id "aZmYzhR3sXRiriItBpdOXQAAACM"] [Sat Feb 21 16:36:46.976851 2026] [security2:error] [pid 2094502:tid 2094502] [client 194.5.82.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/wp-content/uploads/typehub/custom/"] [unique_id "aZmYzhR3sXRiriItBpdOXQAAACM"] [Sat Feb 21 16:36:51.443933 2026] [security2:error] [pid 2105506:tid 2105506] [client 57.141.20.58:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZmY0wGCi3q8m6N5kGLSiAAAAAY"] [Sat Feb 21 16:36:51.444072 2026] [security2:error] [pid 2105506:tid 2105506] [client 57.141.20.58:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "advertwisely.com"] [uri "/"] [unique_id "aZmY0wGCi3q8m6N5kGLSiAAAAAY"] [Sat Feb 21 16:36:54.410000 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY1kgDADwSahU77SdBIAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 16:36:54.410092 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY1kgDADwSahU77SdBIAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 16:36:58.038753 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY2QGCi3q8m6N5kGLSjgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:36:58.038851 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY2QGCi3q8m6N5kGLSjgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:37:04.356699 2026] [cgi:error] [pid 2105506:tid 2105506] [client 194.5.82.170:0] AH02811: stderr from /home/masterco/public_html/cgi-bin: script not found or unable to stat [Sat Feb 21 16:37:06.060241 2026] [security2:error] [pid 2100917:tid 2100917] [client 194.5.82.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-global": Permission denied [hostname "master-comm.net"] [uri "/ludes/"] [unique_id "aZmY4tqfQ3heRoVdf2nJjwAAAAM"] [Sat Feb 21 16:37:06.060353 2026] [security2:error] [pid 2100917:tid 2100917] [client 194.5.82.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterco-ip": Permission denied [hostname "master-comm.net"] [uri "/ludes/"] [unique_id "aZmY4tqfQ3heRoVdf2nJjwAAAAM"] [Sat Feb 21 16:37:11.342225 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY50gDADwSahU77SdBLQAAABY"] [Sat Feb 21 16:37:11.342296 2026] [security2:error] [pid 2094465:tid 2094465] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY50gDADwSahU77SdBLQAAABY"] [Sat Feb 21 16:37:13.352631 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY6dpGmemyPzimpI2OeQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic [Sat Feb 21 16:37:13.352732 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY6dpGmemyPzimpI2OeQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic [Sat Feb 21 16:37:20.804866 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY8EgDADwSahU77SdBNgAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:37:20.804968 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY8EgDADwSahU77SdBNgAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:37:25.046742 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY9NpGmemyPzimpI2OgwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:37:25.046835 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmY9NpGmemyPzimpI2OgwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:37:25.916627 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.916764 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.916822 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.916882 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.916975 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917030 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917111 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917160 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917207 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917312 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917361 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917412 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917462 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.917523 2026] [negotiation:error] [pid 2094641:tid 2094641] (13)Permission denied: [client 194.5.82.170:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:37:25.923742 2026] [cgi:error] [pid 2094641:tid 2094641] [client 194.5.82.170:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/index.html: (13)Permission denied: exec of '/usr/local/cpanel/cgi-sys/index.html' failed [Sat Feb 21 16:37:25.926175 2026] [cgi:error] [pid 2094641:tid 2094641] [client 194.5.82.170:0] End of script output before headers: index.html [Sat Feb 21 16:37:34.103838 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:37:52.949456 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/js/index.php [Sat Feb 21 16:37:52.949728 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/js/index.php7 [Sat Feb 21 16:37:52.949780 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/js/index.php5 [Sat Feb 21 16:37:52.950446 2026] [access_compat:error] [pid 2097018:tid 2097018] [client 194.5.82.170:0] AH01797: client denied by server configuration: /home/masterco/public_html/assets/js/index.phtml [Sat Feb 21 16:38:43.759590 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZQ2_8bsSUFLS0rAkoNQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:38:43.759706 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZQ2_8bsSUFLS0rAkoNQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:38:48.551384 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZSNpGmemyPzimpI2OvQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 16:38:48.551493 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZSNpGmemyPzimpI2OvQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 16:38:48.978747 2026] [access_compat:error] [pid 2103929:tid 2103929] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:38:58.570541 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZUtqfQ3heRoVdf2nJ4wAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:38:58.570707 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZUtqfQ3heRoVdf2nJ4wAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:39:04.565523 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 43.131.39.179:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 16:39:04.565954 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 43.131.39.179:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 16:39:04.566621 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 43.131.39.179:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 16:39:06.039175 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:39:17.587608 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZZdqfQ3heRoVdf2nJ8QAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:39:17.587726 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZZdqfQ3heRoVdf2nJ8QAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:39:33.230611 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZdexZ8aVGL1GXrWCiRwAAAF8"] [Sat Feb 21 16:39:33.230728 2026] [security2:error] [pid 2094641:tid 2094641] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZdexZ8aVGL1GXrWCiRwAAAF8"] [Sat Feb 21 16:39:35.455533 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZdwGCi3q8m6N5kGLTBAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:39:35.455645 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZdwGCi3q8m6N5kGLTBAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:39:58.749994 2026] [security2:error] [pid 2097018:tid 2097018] [client 114.119.142.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmZjcEeUwbTJVvyvwKSmgAAAAE"] [Sat Feb 21 16:39:58.750112 2026] [security2:error] [pid 2097018:tid 2097018] [client 114.119.142.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmZjcEeUwbTJVvyvwKSmgAAAAE"] [Sat Feb 21 16:40:15.116042 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:40:19.875536 2026] [security2:error] [pid 2106943:tid 2106943] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZo6ZVBfJziZ97elz69gAAAAc"] [Sat Feb 21 16:40:19.875615 2026] [security2:error] [pid 2106943:tid 2106943] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZo6ZVBfJziZ97elz69gAAAAc"] [Sat Feb 21 16:40:53.533483 2026] [access_compat:error] [pid 2094605:tid 2094605] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:40:54.168797 2026] [security2:error] [pid 2094641:tid 2094641] [client 45.206.73.165:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/elementor/assets/css/frontend-lite.min.css"] [unique_id "aZmZxuxZ8aVGL1GXrWCigQAAAF8"], referer: https://asalinnovations.com/ [Sat Feb 21 16:40:54.168880 2026] [security2:error] [pid 2094641:tid 2094641] [client 45.206.73.165:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/elementor/assets/css/frontend-lite.min.css"] [unique_id "aZmZxuxZ8aVGL1GXrWCigQAAAF8"], referer: https://asalinnovations.com/ [Sat Feb 21 16:40:54.487966 2026] [security2:error] [pid 2100917:tid 2100917] [client 154.82.170.144:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/jeg-elementor-kit/assets/js/elements/animated-text.js"] [unique_id "aZmZxtqfQ3heRoVdf2nKQwAAAAM"], referer: https://asalinnovations.com/ [Sat Feb 21 16:40:54.488062 2026] [security2:error] [pid 2100917:tid 2100917] [client 154.82.170.144:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/wp-content/plugins/jeg-elementor-kit/assets/js/elements/animated-text.js"] [unique_id "aZmZxtqfQ3heRoVdf2nKQwAAAAM"], referer: https://asalinnovations.com/ [Sat Feb 21 16:40:57.171837 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:41:02.181057 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:41:21.118800 2026] [security2:error] [pid 2094641:tid 2094641] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/api/.env"] [unique_id "aZmZ4exZ8aVGL1GXrWCimQAAAF8"] [Sat Feb 21 16:41:22.636459 2026] [security2:error] [pid 2099532:tid 2099532] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.env"] [unique_id "aZmZ4m_8bsSUFLS0rAkopAAAAAI"] [Sat Feb 21 16:41:22.750259 2026] [security2:error] [pid 2094641:tid 2094641] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "denederveensehoevesite.nl"] [uri "/.git/config"] [unique_id "aZmZ4uxZ8aVGL1GXrWCimgAAAF8"] [Sat Feb 21 16:41:25.875351 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZ5dqfQ3heRoVdf2nKWwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 16:41:25.875431 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZ5dqfQ3heRoVdf2nKWwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 16:41:39.776824 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZ88aXfeKXosj1URLNeQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 16:41:39.776957 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZ88aXfeKXosj1URLNeQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 16:41:48.146389 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZ_NqfQ3heRoVdf2nKaAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:41:48.146479 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmZ_NqfQ3heRoVdf2nKaAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:41:50.108827 2026] [authz_core:error] [pid 2107783:tid 2107783] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/ID3/error_log, referer: binance.com [Sat Feb 21 16:41:56.357988 2026] [security2:error] [pid 2106359:tid 2106359] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmaA-2vt59VWfuyQDZPfQAAAAU"] [Sat Feb 21 16:41:56.358077 2026] [security2:error] [pid 2106359:tid 2106359] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmaA-2vt59VWfuyQDZPfQAAAAU"] [Sat Feb 21 16:42:02.231896 2026] [access_compat:error] [pid 2107796:tid 2107796] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:42:02.923948 2026] [authz_core:error] [pid 2106359:tid 2106359] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/IXR/error_log, referer: binance.com [Sat Feb 21 16:42:06.595886 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaDtqfQ3heRoVdf2nKcwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 16:42:06.595967 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaDtqfQ3heRoVdf2nKcwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 16:42:08.814868 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaEMaXfeKXosj1URLNhgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 16:42:08.814978 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaEMaXfeKXosj1URLNhgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 16:42:15.140461 2026] [authz_core:error] [pid 2106943:tid 2106943] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sat Feb 21 16:42:30.915850 2026] [security2:error] [pid 2094641:tid 2094641] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmaJuxZ8aVGL1GXrWCiwAAAAF8"] [Sat Feb 21 16:42:30.915930 2026] [security2:error] [pid 2094641:tid 2094641] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmaJuxZ8aVGL1GXrWCiwAAAAF8"] [Sat Feb 21 16:42:46.816671 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaNqZVBfJziZ97elz7TwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:42:46.816768 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaNqZVBfJziZ97elz7TwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:43:05.328068 2026] [access_compat:error] [pid 2106943:tid 2106943] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:43:19.910289 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaV6ZVBfJziZ97elz7YQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 16:43:19.910384 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaV6ZVBfJziZ97elz7YQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 16:43:22.528962 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaWm_8bsSUFLS0rAko6gAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 16:43:22.529045 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaWm_8bsSUFLS0rAko6gAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 16:44:09.451531 2026] [security2:error] [pid 2094641:tid 2094641] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmaiOxZ8aVGL1GXrWCi9wAAAF8"] [Sat Feb 21 16:44:09.452691 2026] [security2:error] [pid 2094641:tid 2094641] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmaiOxZ8aVGL1GXrWCi9wAAAF8"] [Sat Feb 21 16:44:12.236133 2026] [authz_core:error] [pid 2094641:tid 2094641] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sat Feb 21 16:44:18.427729 2026] [security2:error] [pid 2094465:tid 2094465] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmakUgDADwSahU77SdCPwAAABY"] [Sat Feb 21 16:44:18.427812 2026] [security2:error] [pid 2094465:tid 2094465] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmakUgDADwSahU77SdCPwAAABY"] [Sat Feb 21 16:44:18.680771 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaktpGmemyPzimpI2PfwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:44:18.680884 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmaktpGmemyPzimpI2PfwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:44:25.722946 2026] [authz_core:error] [pid 2107783:tid 2107783] [client 84.247.187.54:0] AH01630: client denied by server configuration: /home/despvt/public_html/wp-includes/widgets/error_log, referer: binance.com [Sat Feb 21 16:44:35.687676 2026] [access_compat:error] [pid 2106359:tid 2106359] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:45:16.419964 2026] [security2:error] [pid 2106359:tid 2106359] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmazO2vt59VWfuyQDZP7gAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:45:16.420041 2026] [security2:error] [pid 2106359:tid 2106359] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmazO2vt59VWfuyQDZP7gAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:45:28.073240 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZma1wGCi3q8m6N5kGLT2wAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 16:45:28.073331 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZma1wGCi3q8m6N5kGLT2wAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 16:45:30.487480 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZma2uxZ8aVGL1GXrWCjJgAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 16:45:30.487581 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZma2uxZ8aVGL1GXrWCjJgAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 16:45:44.002535 2026] [access_compat:error] [pid 2106943:tid 2106943] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:45:51.044833 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZma7tqfQ3heRoVdf2nK5QAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:45:51.044922 2026] [security2:error] [pid 2100917:tid 2100917] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZma7tqfQ3heRoVdf2nK5QAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 16:46:20.939068 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbDAGCi3q8m6N5kGLT-QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:46:20.939341 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbDAGCi3q8m6N5kGLT-QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 16:46:40.195854 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbIKZVBfJziZ97elz72gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:46:40.195979 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbIKZVBfJziZ97elz72gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2 [Sat Feb 21 16:46:40.540356 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:46:45.572459 2026] [access_compat:error] [pid 2110069:tid 2110069] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:47:06.853576 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbOuxZ8aVGL1GXrWCjWwAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fpower [Sat Feb 21 16:47:06.853659 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbOuxZ8aVGL1GXrWCjWwAAAF8"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fpower [Sat Feb 21 16:47:12.045933 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.077542 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.105536 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.186923 2026] [proxy_fcgi:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.268435 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.339324 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/info"] [unique_id "aZmbQJsYisM-Vb7NdNiSOwAAAAE"] [Sat Feb 21 16:47:12.339400 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/info"] [unique_id "aZmbQJsYisM-Vb7NdNiSOwAAAAE"] [Sat Feb 21 16:47:12.365508 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.389909 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.500441 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.524108 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.552683 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.581362 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.628312 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.656316 2026] [proxy_fcgi:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.729799 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:12.756664 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.bak"] [unique_id "aZmbQO2vt59VWfuyQDZQMQAAAAU"] [Sat Feb 21 16:47:12.780779 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env"] [unique_id "aZmbQJsYisM-Vb7NdNiSPQAAAAE"] [Sat Feb 21 16:47:12.807139 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.backup"] [unique_id "aZmbQKZVBfJziZ97elz78AAAAAc"] [Sat Feb 21 16:47:12.831661 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_sample"] [unique_id "aZmbQMaXfeKXosj1URLOKAAAAAQ"] [Sat Feb 21 16:47:12.855609 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.old"] [unique_id "aZmbQIfNorhGozteNUWLCQAAAAM"] [Sat Feb 21 16:47:12.880781 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.www"] [unique_id "aZmbQG_8bsSUFLS0rAkpbAAAAAI"] [Sat Feb 21 16:47:12.903784 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.docker/.env"] [unique_id "aZmbQEgDADwSahU77SdCmwAAABY"] [Sat Feb 21 16:47:12.924839 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.dev"] [unique_id "aZmbQM32sGbo1LuBv-cb4gAAAAg"] [Sat Feb 21 16:47:12.948229 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.example"] [unique_id "aZmbQOxZ8aVGL1GXrWCjYwAAAF8"] [Sat Feb 21 16:47:12.973111 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_1"] [unique_id "aZmbQO2vt59VWfuyQDZQMgAAAAU"] [Sat Feb 21 16:47:12.996036 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.stage"] [unique_id "aZmbQJsYisM-Vb7NdNiSPgAAAAE"] [Sat Feb 21 16:47:13.070402 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.environment"] [unique_id "aZmbQYfNorhGozteNUWLCgAAAAM"] [Sat Feb 21 16:47:13.101807 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.production"] [unique_id "aZmbQW_8bsSUFLS0rAkpbQAAAAI"] [Sat Feb 21 16:47:13.124381 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.production.local"] [unique_id "aZmbQdpGmemyPzimpI2P3QAAAAA"] [Sat Feb 21 16:47:13.189419 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbQQGCi3q8m6N5kGLUGQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:47:13.189559 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbQQGCi3q8m6N5kGLUGQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 16:47:13.221796 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.envs"] [unique_id "aZmbQZsYisM-Vb7NdNiSPwAAAAE"] [Sat Feb 21 16:47:13.244509 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.docker"] [unique_id "aZmbQaZVBfJziZ97elz78gAAAAc"] [Sat Feb 21 16:47:13.270008 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.sample"] [unique_id "aZmbQcaXfeKXosj1URLOKgAAAAQ"] [Sat Feb 21 16:47:13.291140 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_bak"] [unique_id "aZmbQYfNorhGozteNUWLCwAAAAM"] [Sat Feb 21 16:47:13.316285 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.php"] [unique_id "aZmbQW_8bsSUFLS0rAkpbgAAAAI"] [Sat Feb 21 16:47:13.316926 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:13.343201 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.development.local"] [unique_id "aZmbQc32sGbo1LuBv-cb5AAAAAg"] [Sat Feb 21 16:47:13.369676 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env-example"] [unique_id "aZmbQexZ8aVGL1GXrWCjZQAAAF8"] [Sat Feb 21 16:47:13.396263 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.prod"] [unique_id "aZmbQQGCi3q8m6N5kGLUGgAAAAY"] [Sat Feb 21 16:47:13.421769 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.docker.dev"] [unique_id "aZmbQe2vt59VWfuyQDZQNAAAAAU"] [Sat Feb 21 16:47:13.446819 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.test"] [unique_id "aZmbQZsYisM-Vb7NdNiSQAAAAAE"] [Sat Feb 21 16:47:13.603592 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/.hsenv"] [unique_id "aZmbQexZ8aVGL1GXrWCjZgAAAF8"] [Sat Feb 21 16:47:13.603643 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/.hsenv"] [unique_id "aZmbQexZ8aVGL1GXrWCjZgAAAF8"] [Sat Feb 21 16:47:13.706555 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.dev.local"] [unique_id "aZmbQaZVBfJziZ97elz79AAAAAc"] [Sat Feb 21 16:47:13.758358 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_old"] [unique_id "aZmbQYfNorhGozteNUWLDQAAAAM"] [Sat Feb 21 16:47:13.809671 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.development.sample"] [unique_id "aZmbQc32sGbo1LuBv-cb5gAAAAg"] [Sat Feb 21 16:47:13.864882 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env-sample"] [unique_id "aZmbQdpGmemyPzimpI2P4AAAAAA"] [Sat Feb 21 16:47:13.892167 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.prod.local"] [unique_id "aZmbQe2vt59VWfuyQDZQNgAAAAU"] [Sat Feb 21 16:47:13.916106 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.travis"] [unique_id "aZmbQaZVBfJziZ97elz79QAAAAc"] [Sat Feb 21 16:47:13.942924 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.test.sample"] [unique_id "aZmbQcaXfeKXosj1URLOLQAAAAQ"] [Sat Feb 21 16:47:13.968562 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.2"] [unique_id "aZmbQYfNorhGozteNUWLDgAAAAM"] [Sat Feb 21 16:47:13.994086 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.vscode/.env"] [unique_id "aZmbQZsYisM-Vb7NdNiSQgAAAAE"] [Sat Feb 21 16:47:14.019417 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.local"] [unique_id "aZmbQm_8bsSUFLS0rAkpcQAAAAI"] [Sat Feb 21 16:47:14.041365 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.txt"] [unique_id "aZmbQs32sGbo1LuBv-cb5wAAAAg"] [Sat Feb 21 16:47:14.064060 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.save"] [unique_id "aZmbQuxZ8aVGL1GXrWCjaAAAAF8"] [Sat Feb 21 16:47:14.140473 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.test.local"] [unique_id "aZmbQqZVBfJziZ97elz79gAAAAc"] [Sat Feb 21 16:47:14.184358 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.envrc"] [unique_id "aZmbQofNorhGozteNUWLDwAAAAM"] [Sat Feb 21 16:47:14.206903 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.dist"] [unique_id "aZmbQgGCi3q8m6N5kGLUHQAAAAY"] [Sat Feb 21 16:47:14.231858 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.sample.php"] [unique_id "aZmbQm_8bsSUFLS0rAkpcgAAAAI"] [Sat Feb 21 16:47:14.232597 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:14.258138 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env1"] [unique_id "aZmbQs32sGbo1LuBv-cb6AAAAAg"] [Sat Feb 21 16:47:14.354028 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/env.bak"] [unique_id "aZmbQqZVBfJziZ97elz79wAAAAc"] [Sat Feb 21 16:47:14.379323 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:14.432651 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "brightway.com.pk"] [uri "/pms"] [unique_id "aZmbQm_8bsSUFLS0rAkpcwAAAAI"] [Sat Feb 21 16:47:14.432790 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "brightway.com.pk"] [uri "/pms"] [unique_id "aZmbQm_8bsSUFLS0rAkpcwAAAAI"] [Sat Feb 21 16:47:14.432865 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "brightway.com.pk"] [uri "/pms"] [unique_id "aZmbQm_8bsSUFLS0rAkpcwAAAAI"] [Sat Feb 21 16:47:14.456883 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /k8s/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/k8s/.env"] [unique_id "aZmbQs32sGbo1LuBv-cb6QAAAAg"] [Sat Feb 21 16:47:14.479262 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/config/.env"] [unique_id "aZmbQuxZ8aVGL1GXrWCjagAAAF8"] [Sat Feb 21 16:47:14.503338 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/.env"] [unique_id "aZmbQpsYisM-Vb7NdNiSRAAAAAE"] [Sat Feb 21 16:47:14.526432 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/.env"] [unique_id "aZmbQkgDADwSahU77SdCnwAAABY"] [Sat Feb 21 16:47:14.553344 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/backend/.env"] [unique_id "aZmbQtpGmemyPzimpI2P4wAAAAA"] [Sat Feb 21 16:47:14.576831 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/.env"] [unique_id "aZmbQqZVBfJziZ97elz7-AAAAAc"] [Sat Feb 21 16:47:14.600757 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/admin/.env"] [unique_id "aZmbQsaXfeKXosj1URLOMAAAAAQ"] [Sat Feb 21 16:47:14.628862 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/public/.env"] [unique_id "aZmbQgGCi3q8m6N5kGLUHwAAAAY"] [Sat Feb 21 16:47:14.654366 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/web/.env"] [unique_id "aZmbQm_8bsSUFLS0rAkpdAAAAAI"] [Sat Feb 21 16:47:14.655791 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/web/.env"] [unique_id "aZmbQm_8bsSUFLS0rAkpdAAAAAI"] [Sat Feb 21 16:47:14.655854 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/web/.env"] [unique_id "aZmbQm_8bsSUFLS0rAkpdAAAAAI"] [Sat Feb 21 16:47:14.681631 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/server/.env"] [unique_id "aZmbQs32sGbo1LuBv-cb6gAAAAg"] [Sat Feb 21 16:47:14.682529 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/server/.env"] [unique_id "aZmbQs32sGbo1LuBv-cb6gAAAAg"] [Sat Feb 21 16:47:14.682557 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/server/.env"] [unique_id "aZmbQs32sGbo1LuBv-cb6gAAAAg"] [Sat Feb 21 16:47:14.702811 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/client/.env"] [unique_id "aZmbQuxZ8aVGL1GXrWCjawAAAF8"] [Sat Feb 21 16:47:14.728066 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/frontend/.env"] [unique_id "aZmbQpsYisM-Vb7NdNiSRQAAAAE"] [Sat Feb 21 16:47:14.754280 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.development"] [unique_id "aZmbQtpGmemyPzimpI2P5AAAAAA"] [Sat Feb 21 16:47:14.781367 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.staging"] [unique_id "aZmbQqZVBfJziZ97elz7-QAAAAc"] [Sat Feb 21 16:47:14.805036 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.live"] [unique_id "aZmbQsaXfeKXosj1URLOMQAAAAQ"] [Sat Feb 21 16:47:15.113022 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php"] [unique_id "aZmbQ-xZ8aVGL1GXrWCjbQAAAF8"] [Sat Feb 21 16:47:15.113967 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:15.141642 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:15.433471 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/private/.env"] [unique_id "aZmbQ-2vt59VWfuyQDZQOgAAAAU"] [Sat Feb 21 16:47:15.460652 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/backup/.env"] [unique_id "aZmbQ2_8bsSUFLS0rAkpeAAAAAI"] [Sat Feb 21 16:47:15.486399 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/.env"] [unique_id "aZmbQ832sGbo1LuBv-cb7gAAAAg"] [Sat Feb 21 16:47:15.510848 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dev/.env"] [unique_id "aZmbQ9pGmemyPzimpI2P6AAAAAA"] [Sat Feb 21 16:47:15.541313 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/staging/.env"] [unique_id "aZmbQ0gDADwSahU77SdCowAAABY"] [Sat Feb 21 16:47:15.571658 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/production/.env"] [unique_id "aZmbQ6ZVBfJziZ97elz7_QAAAAc"] [Sat Feb 21 16:47:15.599891 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/.env"] [unique_id "aZmbQ8aXfeKXosj1URLONQAAAAQ"] [Sat Feb 21 16:47:15.756212 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:15.875554 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/administrator/.env"] [unique_id "aZmbQ832sGbo1LuBv-cb8AAAAAg"] [Sat Feb 21 16:47:15.905676 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cms/.env"] [unique_id "aZmbQ5sYisM-Vb7NdNiSSgAAAAE"] [Sat Feb 21 16:47:15.926961 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/portal/.env"] [unique_id "aZmbQ9pGmemyPzimpI2P6gAAAAA"] [Sat Feb 21 16:47:15.950007 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dashboard/.env"] [unique_id "aZmbQ-xZ8aVGL1GXrWCjcQAAAF8"] [Sat Feb 21 16:47:15.979642 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/crm/.env"] [unique_id "aZmbQ0gDADwSahU77SdCpQAAABY"] [Sat Feb 21 16:47:16.001765 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mail/.env"] [unique_id "aZmbRMaXfeKXosj1URLONwAAAAQ"] [Sat Feb 21 16:47:16.026748 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mailer/.env"] [unique_id "aZmbRG_8bsSUFLS0rAkpewAAAAI"] [Sat Feb 21 16:47:16.054742 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/deployment/.env"] [unique_id "aZmbRM32sGbo1LuBv-cb8QAAAAg"] [Sat Feb 21 16:47:16.055832 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/deployment/.env"] [unique_id "aZmbRM32sGbo1LuBv-cb8QAAAAg"] [Sat Feb 21 16:47:16.055864 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/deployment/.env"] [unique_id "aZmbRM32sGbo1LuBv-cb8QAAAAg"] [Sat Feb 21 16:47:16.080334 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/.env"] [unique_id "aZmbRKZVBfJziZ97elz7_wAAAAc"] [Sat Feb 21 16:47:16.106212 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/helm/.env"] [unique_id "aZmbRJsYisM-Vb7NdNiSSwAAAAE"] [Sat Feb 21 16:47:16.133341 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/terraform/.env"] [unique_id "aZmbRNpGmemyPzimpI2P6wAAAAA"] [Sat Feb 21 16:47:16.162488 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ansible/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ansible/.env"] [unique_id "aZmbROxZ8aVGL1GXrWCjcgAAAF8"] [Sat Feb 21 16:47:16.307793 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_example"] [unique_id "aZmbRAGCi3q8m6N5kGLUIwAAAAY"] [Sat Feb 21 16:47:16.334600 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/core/.env"] [unique_id "aZmbRNpGmemyPzimpI2P7AAAAAA"] [Sat Feb 21 16:47:16.411480 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/local/.env"] [unique_id "aZmbRMaXfeKXosj1URLOOQAAAAQ"] [Sat Feb 21 16:47:16.437359 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/application/.env"] [unique_id "aZmbRG_8bsSUFLS0rAkpfQAAAAI"] [Sat Feb 21 16:47:16.514589 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/config/settings.ini"] [unique_id "aZmbRNpGmemyPzimpI2P7QAAAAA"] [Sat Feb 21 16:47:16.540407 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/env/.env"] [unique_id "aZmbROxZ8aVGL1GXrWCjdAAAAF8"] [Sat Feb 21 16:47:16.566154 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/new/.env"] [unique_id "aZmbREgDADwSahU77SdCqAAAABY"] [Sat Feb 21 16:47:16.590638 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/new/.env.local"] [unique_id "aZmbRJsYisM-Vb7NdNiSTQAAAAE"] [Sat Feb 21 16:47:16.615461 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/new/.env.production"] [unique_id "aZmbRMaXfeKXosj1URLOOgAAAAQ"] [Sat Feb 21 16:47:16.639228 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/new/.env.staging"] [unique_id "aZmbRG_8bsSUFLS0rAkpfgAAAAI"] [Sat Feb 21 16:47:16.670204 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:16.789904 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/awstats/.env"] [unique_id "aZmbREgDADwSahU77SdCqQAAABY"] [Sat Feb 21 16:47:16.815158 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/conf/.env"] [unique_id "aZmbRJsYisM-Vb7NdNiSTgAAAAE"] [Sat Feb 21 16:47:16.838028 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cron/.env"] [unique_id "aZmbRG_8bsSUFLS0rAkpfwAAAAI"] [Sat Feb 21 16:47:16.869211 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/www/.env"] [unique_id "aZmbRM32sGbo1LuBv-cb9QAAAAg"] [Sat Feb 21 16:47:16.894793 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/app/.env"] [unique_id "aZmbRAGCi3q8m6N5kGLUJgAAAAY"] [Sat Feb 21 16:47:16.919989 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/env.backup"] [unique_id "aZmbRNpGmemyPzimpI2P7wAAAAA"] [Sat Feb 21 16:47:17.024260 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/laravel/info.php"] [unique_id "aZmbRZsYisM-Vb7NdNiSTwAAAAE"] [Sat Feb 21 16:47:17.024336 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/laravel/info.php"] [unique_id "aZmbRZsYisM-Vb7NdNiSTwAAAAE"] [Sat Feb 21 16:47:17.047225 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/js/.env"] [unique_id "aZmbRc32sGbo1LuBv-cb9gAAAAg"] [Sat Feb 21 16:47:17.072137 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/core/.env"] [unique_id "aZmbRQGCi3q8m6N5kGLUJwAAAAY"] [Sat Feb 21 16:47:17.095675 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/nginx/.env"] [unique_id "aZmbRdpGmemyPzimpI2P8AAAAAA"] [Sat Feb 21 16:47:17.119313 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/site/.env"] [unique_id "aZmbRcaXfeKXosj1URLOPAAAAAQ"] [Sat Feb 21 16:47:17.142440 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/xampp/.env"] [unique_id "aZmbRexZ8aVGL1GXrWCjdwAAAF8"] [Sat Feb 21 16:47:17.165931 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.docker/laravel/app/.env"] [unique_id "aZmbRaZVBfJziZ97elz8BAAAAAc"] [Sat Feb 21 16:47:17.192122 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/.env.local"] [unique_id "aZmbRUgDADwSahU77SdCqwAAABY"] [Sat Feb 21 16:47:17.218287 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/.env.production"] [unique_id "aZmbRZsYisM-Vb7NdNiSUAAAAAE"] [Sat Feb 21 16:47:17.243134 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/.env.staging"] [unique_id "aZmbRc32sGbo1LuBv-cb9wAAAAg"] [Sat Feb 21 16:47:17.268139 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/core/.env.local"] [unique_id "aZmbRQGCi3q8m6N5kGLUKAAAAAY"] [Sat Feb 21 16:47:17.312515 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/core/.env.production"] [unique_id "aZmbRdpGmemyPzimpI2P8QAAAAA"] [Sat Feb 21 16:47:17.355684 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/laravel/core/.env.staging"] [unique_id "aZmbRcaXfeKXosj1URLOPQAAAAQ"] [Sat Feb 21 16:47:17.391167 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/main/.env"] [unique_id "aZmbRexZ8aVGL1GXrWCjeAAAAF8"] [Sat Feb 21 16:47:17.441174 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/app/private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/storage/app/private/.env"] [unique_id "aZmbRUgDADwSahU77SdCrAAAABY"] [Sat Feb 21 16:47:17.473566 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/storage/logs/laravel.log"] [unique_id "aZmbRZsYisM-Vb7NdNiSUQAAAAE"] [Sat Feb 21 16:47:17.505238 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/composer.lock"] [unique_id "aZmbRc32sGbo1LuBv-cb-AAAAAg"] [Sat Feb 21 16:47:17.531853 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/server.key"] [unique_id "aZmbRQGCi3q8m6N5kGLUKQAAAAY"] [Sat Feb 21 16:47:17.593263 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/php5.ini"] [unique_id "aZmbRexZ8aVGL1GXrWCjeQAAAF8"] [Sat Feb 21 16:47:17.790629 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:17.813052 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php.bak"] [unique_id "aZmbRcaXfeKXosj1URLOPwAAAAQ"] [Sat Feb 21 16:47:17.864739 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:17.889277 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php.backup"] [unique_id "aZmbRUgDADwSahU77SdCrgAAABY"] [Sat Feb 21 16:47:17.988194 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/config.ini"] [unique_id "aZmbRW_8bsSUFLS0rAkpgwAAAAI"] [Sat Feb 21 16:47:18.035518 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/.aws/credentials.bak"] [unique_id "aZmbRgGCi3q8m6N5kGLUKwAAAAY"] [Sat Feb 21 16:47:18.063935 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/credentials/admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.aws/credentials/admin/.env"] [unique_id "aZmbRsaXfeKXosj1URLOQAAAAAQ"] [Sat Feb 21 16:47:18.123756 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/.bak"] [unique_id "aZmbRuxZ8aVGL1GXrWCjewAAAF8"] [Sat Feb 21 16:47:18.238322 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.bitbucket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.bitbucket/.env"] [unique_id "aZmbRu2vt59VWfuyQDZQQAAAAAU"] [Sat Feb 21 16:47:18.364255 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.c9/metadata/environment/.env"] [unique_id "aZmbRgGCi3q8m6N5kGLULAAAAAY"] [Sat Feb 21 16:47:18.423192 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.circleci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.circleci/.env"] [unique_id "aZmbRqZVBfJziZ97elz8CQAAAAc"] [Sat Feb 21 16:47:18.516998 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env-db"] [unique_id "aZmbRkgDADwSahU77SdCsAAAABY"] [Sat Feb 21 16:47:18.553270 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.back"] [unique_id "aZmbRu2vt59VWfuyQDZQQQAAAAU"] [Sat Feb 21 16:47:18.579661 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bkp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.bkp"] [unique_id "aZmbRm_8bsSUFLS0rAkphQAAAAI"] [Sat Feb 21 16:47:18.601002 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.credentials"] [unique_id "aZmbRs32sGbo1LuBv-cb_AAAAAg"] [Sat Feb 21 16:47:18.622148 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.email"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.email"] [unique_id "aZmbRqZVBfJziZ97elz8CgAAAAc"] [Sat Feb 21 16:47:18.646758 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hidden"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.hidden"] [unique_id "aZmbRuxZ8aVGL1GXrWCjfQAAAF8"] [Sat Feb 21 16:47:18.674122 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hide"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.hide"] [unique_id "aZmbRtpGmemyPzimpI2P9gAAAAA"] [Sat Feb 21 16:47:18.707814 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.js"] [unique_id "aZmbRsaXfeKXosj1URLOQgAAAAQ"] [Sat Feb 21 16:47:18.734457 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.key"] [unique_id "aZmbRkgDADwSahU77SdCsQAAABY"] [Sat Feb 21 16:47:18.759880 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.mail"] [unique_id "aZmbRofNorhGozteNUWLEgAAAAM"] [Sat Feb 21 16:47:18.782784 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.smtp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.smtp"] [unique_id "aZmbRu2vt59VWfuyQDZQQgAAAAU"] [Sat Feb 21 16:47:18.817077 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.swp"] [unique_id "aZmbRm_8bsSUFLS0rAkphgAAAAI"] [Sat Feb 21 16:47:18.838431 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.testing"] [unique_id "aZmbRs32sGbo1LuBv-cb_QAAAAg"] [Sat Feb 21 16:47:18.861833 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.uat"] [unique_id "aZmbRqZVBfJziZ97elz8CwAAAAc"] [Sat Feb 21 16:47:18.908487 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_aws"] [unique_id "aZmbRtpGmemyPzimpI2P9wAAAAA"] [Sat Feb 21 16:47:18.930843 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_backup"] [unique_id "aZmbRgGCi3q8m6N5kGLULgAAAAY"] [Sat Feb 21 16:47:18.958862 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_copy"] [unique_id "aZmbRsaXfeKXosj1URLOQwAAAAQ"] [Sat Feb 21 16:47:18.984817 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_private"] [unique_id "aZmbRkgDADwSahU77SdCsgAAABY"] [Sat Feb 21 16:47:19.013828 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env_secret"] [unique_id "aZmbR4fNorhGozteNUWLEwAAAAM"] [Sat Feb 21 16:47:19.039341 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env~"] [unique_id "aZmbR-2vt59VWfuyQDZQQwAAAAU"] [Sat Feb 21 16:47:19.063815 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.git/"] [unique_id "aZmbR2_8bsSUFLS0rAkphwAAAAI"] [Sat Feb 21 16:47:19.089842 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.git/config"] [unique_id "aZmbR832sGbo1LuBv-cb_gAAAAg"] [Sat Feb 21 16:47:19.112548 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.github/.env"] [unique_id "aZmbR9pGmemyPzimpI2P-AAAAAA"] [Sat Feb 21 16:47:19.161535 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.gitignore"] [unique_id "aZmbR8aXfeKXosj1URLORAAAAAQ"] [Sat Feb 21 16:47:19.212001 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.gitlab-ci/.env"] [unique_id "aZmbR0gDADwSahU77SdCswAAABY"] [Sat Feb 21 16:47:19.237739 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.gitlab/.env"] [unique_id "aZmbR4fNorhGozteNUWLFAAAAAM"] [Sat Feb 21 16:47:19.262428 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.hg/"] [unique_id "aZmbR-2vt59VWfuyQDZQRAAAAAU"] [Sat Feb 21 16:47:19.304377 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.idea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.idea/.env"] [unique_id "aZmbR2_8bsSUFLS0rAkpiAAAAAI"] [Sat Feb 21 16:47:19.605987 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.svn/"] [unique_id "aZmbRwGCi3q8m6N5kGLUMQAAAAY"] [Sat Feb 21 16:47:19.750679 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aZmbR2_8bsSUFLS0rAkpigAAAAI"] [Sat Feb 21 16:47:19.772586 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "aZmbR832sGbo1LuBv-ccAQAAAAg"] [Sat Feb 21 16:47:19.797829 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "aZmbR9pGmemyPzimpI2P-wAAAAA"] [Sat Feb 21 16:47:19.821132 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "aZmbRwGCi3q8m6N5kGLUMgAAAAY"] [Sat Feb 21 16:47:19.854860 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "aZmbR8aXfeKXosj1URLORwAAAAQ"] [Sat Feb 21 16:47:19.879175 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "aZmbR6ZVBfJziZ97elz8DwAAAAc"] [Sat Feb 21 16:47:19.908488 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:19.932229 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/3-sequelize/final/.env"] [unique_id "aZmbR5sYisM-Vb7NdNiSVQAAAAE"] [Sat Feb 21 16:47:19.959375 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/31_structure_tests/.env"] [unique_id "aZmbR2_8bsSUFLS0rAkpiwAAAAI"] [Sat Feb 21 16:47:20.645467 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /__tests__/test-become/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/__tests__/test-become/.env"] [unique_id "aZmbSOxZ8aVGL1GXrWCjgwAAAF8"] [Sat Feb 21 16:47:21.111224 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/_static/.env"] [unique_id "aZmbSW_8bsSUFLS0rAkpjgAAAAI"] [Sat Feb 21 16:47:21.139383 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:21.167008 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/acme-challenge/.env"] [unique_id "aZmbSYfNorhGozteNUWLGgAAAAM"] [Sat Feb 21 16:47:21.197022 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/acme/.env"] [unique_id "aZmbSexZ8aVGL1GXrWCjhQAAAF8"] [Sat Feb 21 16:47:21.229299 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/acme_challenges/.env"] [unique_id "aZmbSc32sGbo1LuBv-ccBQAAAAg"] [Sat Feb 21 16:47:21.263370 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/actions-server/.env"] [unique_id "aZmbSUgDADwSahU77SdCuAAAABY"] [Sat Feb 21 16:47:21.353354 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/admin-app/.env"] [unique_id "aZmbSW_8bsSUFLS0rAkpjwAAAAI"] [Sat Feb 21 16:47:21.382842 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/admin-panel/.env"] [unique_id "aZmbSaZVBfJziZ97elz8EwAAAAc"] [Sat Feb 21 16:47:21.412551 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:21.502220 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/adminapp/.env"] [unique_id "aZmbSc32sGbo1LuBv-ccBgAAAAg"] [Sat Feb 21 16:47:21.532926 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:21.567578 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/adminer/.env"] [unique_id "aZmbSe2vt59VWfuyQDZQTAAAAAU"] [Sat Feb 21 16:47:21.659022 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/agora/.env"] [unique_id "aZmbSaZVBfJziZ97elz8FAAAAAc"] [Sat Feb 21 16:47:21.690388 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/alpha/.env"] [unique_id "aZmbSZsYisM-Vb7NdNiSWgAAAAE"] [Sat Feb 21 16:47:21.717631 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/anaconda/.env"] [unique_id "aZmbSYfNorhGozteNUWLHAAAAAM"] [Sat Feb 21 16:47:21.751189 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:21.871483 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:21.903440 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:21.939327 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api-server/.env"] [unique_id "aZmbSaZVBfJziZ97elz8FQAAAAc"] [Sat Feb 21 16:47:21.968169 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/.env.back"] [unique_id "aZmbSZsYisM-Vb7NdNiSWwAAAAE"] [Sat Feb 21 16:47:21.999735 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/.env.example"] [unique_id "aZmbSexZ8aVGL1GXrWCjiAAAAF8"] [Sat Feb 21 16:47:22.026632 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/.env.sample"] [unique_id "aZmbSgGCi3q8m6N5kGLUNgAAAAY"] [Sat Feb 21 16:47:22.062267 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/.env.save"] [unique_id "aZmbSu2vt59VWfuyQDZQTgAAAAU"] [Sat Feb 21 16:47:22.298242 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/src/.env"] [unique_id "aZmbSu2vt59VWfuyQDZQTwAAAAU"] [Sat Feb 21 16:47:22.335015 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/v1/.env"] [unique_id "aZmbSsaXfeKXosj1URLOTwAAAAQ"] [Sat Feb 21 16:47:22.391225 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/v2/.env"] [unique_id "aZmbSm_8bsSUFLS0rAkpkwAAAAI"] [Sat Feb 21 16:47:22.420941 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/apis/.env"] [unique_id "aZmbStpGmemyPzimpI2QAwAAAAA"] [Sat Feb 21 16:47:22.484204 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app-order-client/.env"] [unique_id "aZmbSpsYisM-Vb7NdNiSXQAAAAE"] [Sat Feb 21 16:47:22.538047 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/.env.example"] [unique_id "aZmbSu2vt59VWfuyQDZQUAAAAAU"] [Sat Feb 21 16:47:22.571913 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/.env.sample"] [unique_id "aZmbSsaXfeKXosj1URLOUAAAAAQ"] [Sat Feb 21 16:47:22.603155 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/.env.save"] [unique_id "aZmbSkgDADwSahU77SdCvQAAABY"] [Sat Feb 21 16:47:22.633782 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/.env.back"] [unique_id "aZmbSm_8bsSUFLS0rAkplAAAAAI"] [Sat Feb 21 16:47:22.663647 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/client/.env"] [unique_id "aZmbStpGmemyPzimpI2QBAAAAAA"] [Sat Feb 21 16:47:22.693775 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "aZmbSqZVBfJziZ97elz8GAAAAAc"] [Sat Feb 21 16:47:22.721307 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/app/config.js"] [unique_id "aZmbSpsYisM-Vb7NdNiSXgAAAAE"] [Sat Feb 21 16:47:22.721516 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/app/config.js"] [unique_id "aZmbSpsYisM-Vb7NdNiSXgAAAAE"] [Sat Feb 21 16:47:22.747368 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/config/.env"] [unique_id "aZmbSgGCi3q8m6N5kGLUOQAAAAY"] [Sat Feb 21 16:47:22.780326 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/config/dev/.env"] [unique_id "aZmbSsaXfeKXosj1URLOUQAAAAQ"] [Sat Feb 21 16:47:22.807486 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/frontend/.env"] [unique_id "aZmbSkgDADwSahU77SdCvgAAABY"] [Sat Feb 21 16:47:22.896156 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app1-static/.env"] [unique_id "aZmbStpGmemyPzimpI2QBQAAAAA"] [Sat Feb 21 16:47:22.926814 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app2-static/.env"] [unique_id "aZmbSqZVBfJziZ97elz8GQAAAAc"] [Sat Feb 21 16:47:22.957982 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app_dir/.env"] [unique_id "aZmbSpsYisM-Vb7NdNiSXwAAAAE"] [Sat Feb 21 16:47:22.986293 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app_nginx_static_path/.env"] [unique_id "aZmbSgGCi3q8m6N5kGLUOgAAAAY"] [Sat Feb 21 16:47:23.017426 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/application/.env.sample"] [unique_id "aZmbS8aXfeKXosj1URLOUgAAAAQ"] [Sat Feb 21 16:47:23.045530 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/application/.env.save"] [unique_id "aZmbS0gDADwSahU77SdCvwAAABY"] [Sat Feb 21 16:47:23.076177 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/apps/.env"] [unique_id "aZmbS2_8bsSUFLS0rAkplgAAAAI"] [Sat Feb 21 16:47:23.109087 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/apps/client/.env"] [unique_id "aZmbS-xZ8aVGL1GXrWCjjAAAAF8"] [Sat Feb 21 16:47:23.139007 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Archipel/.env"] [unique_id "aZmbS9pGmemyPzimpI2QBgAAAAA"] [Sat Feb 21 16:47:23.169798 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:23.198686 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/asset_img/.env"] [unique_id "aZmbS5sYisM-Vb7NdNiSYAAAAAE"] [Sat Feb 21 16:47:23.228628 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/assets/.env"] [unique_id "aZmbSwGCi3q8m6N5kGLUOwAAAAY"] [Sat Feb 21 16:47:23.444119 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Assignment3/.env"] [unique_id "aZmbS5sYisM-Vb7NdNiSYQAAAAE"] [Sat Feb 21 16:47:23.474267 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Assignment4/.env"] [unique_id "aZmbSwGCi3q8m6N5kGLUPAAAAAY"] [Sat Feb 21 16:47:23.503360 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/audio/.env"] [unique_id "aZmbS8aXfeKXosj1URLOVAAAAAQ"] [Sat Feb 21 16:47:23.591918 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/aws/.env"] [unique_id "aZmbS9pGmemyPzimpI2QCAAAAAA"] [Sat Feb 21 16:47:23.619939 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /azure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/azure/.env"] [unique_id "aZmbS6ZVBfJziZ97elz8HAAAAAc"] [Sat Feb 21 16:47:23.649829 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "aZmbS-2vt59VWfuyQDZQVAAAAAU"] [Sat Feb 21 16:47:23.680838 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "aZmbS5sYisM-Vb7NdNiSYgAAAAE"] [Sat Feb 21 16:47:23.711979 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "aZmbSwGCi3q8m6N5kGLUPQAAAAY"] [Sat Feb 21 16:47:23.739585 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "aZmbS8aXfeKXosj1URLOVQAAAAQ"] [Sat Feb 21 16:47:23.770974 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "aZmbS0gDADwSahU77SdCwgAAABY"] [Sat Feb 21 16:47:23.800247 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "aZmbS-xZ8aVGL1GXrWCjjwAAAF8"] [Sat Feb 21 16:47:23.829473 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "aZmbS6ZVBfJziZ97elz8HQAAAAc"] [Sat Feb 21 16:47:23.860305 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/back-end/app/.env"] [unique_id "aZmbS-2vt59VWfuyQDZQVQAAAAU"] [Sat Feb 21 16:47:23.889894 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/back/.env"] [unique_id "aZmbS5sYisM-Vb7NdNiSYwAAAAE"] [Sat Feb 21 16:47:23.918292 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/backend/.env.local"] [unique_id "aZmbS4fNorhGozteNUWLHwAAAAM"] [Sat Feb 21 16:47:23.946717 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/backend/config/.env"] [unique_id "aZmbSwGCi3q8m6N5kGLUPgAAAAY"] [Sat Feb 21 16:47:24.008220 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/backend/src/.env"] [unique_id "aZmbTEgDADwSahU77SdCwwAAABY"] [Sat Feb 21 16:47:24.035540 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/backendfinaltest/.env"] [unique_id "aZmbTOxZ8aVGL1GXrWCjkAAAAF8"] [Sat Feb 21 16:47:24.122341 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/base_dir/.env"] [unique_id "aZmbTJsYisM-Vb7NdNiSZAAAAAE"] [Sat Feb 21 16:47:24.150972 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/basic-network/.env"] [unique_id "aZmbTIfNorhGozteNUWLIAAAAAM"] [Sat Feb 21 16:47:24.179261 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/bgoldd/.env"] [unique_id "aZmbTAGCi3q8m6N5kGLUPwAAAAY"] [Sat Feb 21 16:47:24.210566 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/bitcoind/.env"] [unique_id "aZmbTMaXfeKXosj1URLOVwAAAAQ"] [Sat Feb 21 16:47:24.243627 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/blankon/.env"] [unique_id "aZmbTEgDADwSahU77SdCxAAAABY"] [Sat Feb 21 16:47:24.277475 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/blob/.env"] [unique_id "aZmbTOxZ8aVGL1GXrWCjkQAAAF8"] [Sat Feb 21 16:47:24.306797 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/blog/.env"] [unique_id "aZmbTO2vt59VWfuyQDZQVwAAAAU"] [Sat Feb 21 16:47:24.335471 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blogs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/blogs/.env"] [unique_id "aZmbTJsYisM-Vb7NdNiSZQAAAAE"] [Sat Feb 21 16:47:24.366413 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/blue/.env"] [unique_id "aZmbTIfNorhGozteNUWLIQAAAAM"] [Sat Feb 21 16:47:24.395604 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/bookchain-client/.env"] [unique_id "aZmbTMaXfeKXosj1URLOWAAAAAQ"] [Sat Feb 21 16:47:24.460610 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/bootstrap/.env"] [unique_id "aZmbTNpGmemyPzimpI2QCwAAAAA"] [Sat Feb 21 16:47:24.489056 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "aZmbTOxZ8aVGL1GXrWCjkgAAAF8"] [Sat Feb 21 16:47:24.517158 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "aZmbTO2vt59VWfuyQDZQWAAAAAU"] [Sat Feb 21 16:47:24.545681 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "aZmbTJsYisM-Vb7NdNiSZgAAAAE"] [Sat Feb 21 16:47:24.574574 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/bucoffea/.env"] [unique_id "aZmbTIfNorhGozteNUWLIgAAAAM"] [Sat Feb 21 16:47:24.602620 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:24.661498 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/build/.env"] [unique_id "aZmbTNpGmemyPzimpI2QDAAAAAA"] [Sat Feb 21 16:47:24.834293 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:24.869163 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cardea/backend/.env"] [unique_id "aZmbTEgDADwSahU77SdCxwAAABY"] [Sat Feb 21 16:47:24.902657 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cdw-backend/.env"] [unique_id "aZmbTO2vt59VWfuyQDZQWgAAAAU"] [Sat Feb 21 16:47:24.933992 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cgi-bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cgi-bin/.env"] [unique_id "aZmbTAGCi3q8m6N5kGLUQgAAAAY"] [Sat Feb 21 16:47:24.934640 2026] [cgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH02811: stderr from /home/brightwaypk/public_html/cgi-bin/.env: script not found or unable to stat [Sat Feb 21 16:47:24.964127 2026] [cgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH02811: stderr from /home/brightwaypk/public_html/cgi-bin/pass.txt: script not found or unable to stat [Sat Feb 21 16:47:24.994789 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch2-mytodo/.env"] [unique_id "aZmbTMaXfeKXosj1URLOWwAAAAQ"] [Sat Feb 21 16:47:25.021254 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch6-mytodo/.env"] [unique_id "aZmbTW_8bsSUFLS0rAkpmwAAAAI"] [Sat Feb 21 16:47:25.051009 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch6a-mytodo/.env"] [unique_id "aZmbTUgDADwSahU77SdCyAAAABY"] [Sat Feb 21 16:47:25.081552 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch7-mytodo/.env"] [unique_id "aZmbTe2vt59VWfuyQDZQWwAAAAU"] [Sat Feb 21 16:47:25.111437 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch7a-mytodo/.env"] [unique_id "aZmbTZsYisM-Vb7NdNiSaQAAAAE"] [Sat Feb 21 16:47:25.139407 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch8-mytodo/.env"] [unique_id "aZmbTexZ8aVGL1GXrWCjlQAAAF8"] [Sat Feb 21 16:47:25.169035 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch8a-mytodo/.env"] [unique_id "aZmbTW_8bsSUFLS0rAkpnAAAAAI"] [Sat Feb 21 16:47:25.197426 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ch8b-mytodo/.env"] [unique_id "aZmbTUgDADwSahU77SdCyQAAABY"] [Sat Feb 21 16:47:25.225877 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Chai/.env"] [unique_id "aZmbTe2vt59VWfuyQDZQXAAAAAU"] [Sat Feb 21 16:47:25.258648 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/challenge/.env"] [unique_id "aZmbTYfNorhGozteNUWLJQAAAAM"] [Sat Feb 21 16:47:25.289671 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/challenges/.env"] [unique_id "aZmbTZsYisM-Vb7NdNiSagAAAAE"] [Sat Feb 21 16:47:25.319379 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/charts/liveObjects/.env"] [unique_id "aZmbTUgDADwSahU77SdCygAAABY"] [Sat Feb 21 16:47:25.349878 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/chat-client/.env"] [unique_id "aZmbTaZVBfJziZ97elz8IAAAAAc"] [Sat Feb 21 16:47:25.383182 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/chiminey/.env"] [unique_id "aZmbTe2vt59VWfuyQDZQXQAAAAU"] [Sat Feb 21 16:47:25.436012 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ci/.env"] [unique_id "aZmbTZsYisM-Vb7NdNiSawAAAAE"] [Sat Feb 21 16:47:25.463529 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/client-app/.env"] [unique_id "aZmbTUgDADwSahU77SdCywAAABY"] [Sat Feb 21 16:47:25.493945 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/client/mutual-fund-app/.env"] [unique_id "aZmbTaZVBfJziZ97elz8IQAAAAc"] [Sat Feb 21 16:47:25.524459 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/client/src/.env"] [unique_id "aZmbTe2vt59VWfuyQDZQXgAAAAU"] [Sat Feb 21 16:47:25.552648 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ClientApp/.env"] [unique_id "aZmbTYfNorhGozteNUWLJwAAAAM"] [Sat Feb 21 16:47:25.580387 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/clld_dir/.env"] [unique_id "aZmbTZsYisM-Vb7NdNiSbAAAAAE"] [Sat Feb 21 16:47:25.611630 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cloud/.env"] [unique_id "aZmbTUgDADwSahU77SdCzAAAABY"] [Sat Feb 21 16:47:25.638831 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aZmbTaZVBfJziZ97elz8IgAAAAc"] [Sat Feb 21 16:47:25.666757 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/code/api/.env"] [unique_id "aZmbTe2vt59VWfuyQDZQXwAAAAU"] [Sat Feb 21 16:47:25.692704 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/code/web/.env"] [unique_id "aZmbTcaXfeKXosj1URLOXgAAAAQ"] [Sat Feb 21 16:47:25.719887 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "aZmbTZsYisM-Vb7NdNiSbQAAAAE"] [Sat Feb 21 16:47:25.751460 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/codenames-frontend/.env"] [unique_id "aZmbTdpGmemyPzimpI2QDgAAAAA"] [Sat Feb 21 16:47:25.779915 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/collab-connect-web-application/server/.env"] [unique_id "aZmbTUgDADwSahU77SdCzQAAABY"] [Sat Feb 21 16:47:25.807208 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/collected_static/.env"] [unique_id "aZmbTaZVBfJziZ97elz8IwAAAAc"] [Sat Feb 21 16:47:25.835640 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/community/.env"] [unique_id "aZmbTcaXfeKXosj1URLOXwAAAAQ"] [Sat Feb 21 16:47:25.863335 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/compose/.env"] [unique_id "aZmbTZsYisM-Vb7NdNiSbgAAAAE"] [Sat Feb 21 16:47:25.946555 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/config/.env.dev"] [unique_id "aZmbTYfNorhGozteNUWLKQAAAAM"] [Sat Feb 21 16:47:25.979205 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/config/.env.local"] [unique_id "aZmbTcaXfeKXosj1URLOYAAAAAQ"] [Sat Feb 21 16:47:26.006369 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/config/.env.production"] [unique_id "aZmbTgGCi3q8m6N5kGLURAAAAAY"] [Sat Feb 21 16:47:26.126205 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/config/config.yml"] [unique_id "aZmbTkgDADwSahU77SdCzwAAABY"] [Sat Feb 21 16:47:26.303899 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ContainerRegistry/.env"] [unique_id "aZmbTtpGmemyPzimpI2QEQAAAAA"] [Sat Feb 21 16:47:26.310649 2026] [security2:error] [pid 2099532:tid 2099532] [client 136.144.33.149:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmbTW_8bsSUFLS0rAkpnQAAAAI"] [Sat Feb 21 16:47:26.310712 2026] [security2:error] [pid 2099532:tid 2099532] [client 136.144.33.149:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmbTW_8bsSUFLS0rAkpnQAAAAI"] [Sat Feb 21 16:47:26.333975 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/containers/.env"] [unique_id "aZmbTkgDADwSahU77SdC0AAAABY"] [Sat Feb 21 16:47:26.364325 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/content/.env"] [unique_id "aZmbTofNorhGozteNUWLKwAAAAM"] [Sat Feb 21 16:47:26.393415 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/control/.env"] [unique_id "aZmbTsaXfeKXosj1URLOYgAAAAQ"] [Sat Feb 21 16:47:26.422739 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/core/app/.env"] [unique_id "aZmbTpsYisM-Vb7NdNiScQAAAAE"] [Sat Feb 21 16:47:26.450422 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/core/Datavase/.env"] [unique_id "aZmbTqZVBfJziZ97elz8JgAAAAc"] [Sat Feb 21 16:47:26.482657 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/core/persistence/.env"] [unique_id "aZmbTs32sGbo1LuBv-ccDAAAAAg"] [Sat Feb 21 16:47:26.510164 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "aZmbTgGCi3q8m6N5kGLURgAAAAY"] [Sat Feb 21 16:47:26.540678 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/counterblockd/.env"] [unique_id "aZmbTtpGmemyPzimpI2QEgAAAAA"] [Sat Feb 21 16:47:26.568344 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/counterwallet/.env"] [unique_id "aZmbTm_8bsSUFLS0rAkpngAAAAI"] [Sat Feb 21 16:47:26.596077 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cp/.env"] [unique_id "aZmbTkgDADwSahU77SdC0QAAABY"] [Sat Feb 21 16:47:26.598503 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:47:26.623123 2026] [security2:error] [pid 2110551:tid 2110551] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cronlab/.env"] [unique_id "aZmbTofNorhGozteNUWLLAAAAAM"] [Sat Feb 21 16:47:26.658062 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/cryo_project/.env"] [unique_id "aZmbTsaXfeKXosj1URLOYwAAAAQ"] [Sat Feb 21 16:47:26.686445 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/css/.env"] [unique_id "aZmbTpsYisM-Vb7NdNiScgAAAAE"] [Sat Feb 21 16:47:26.715741 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/custom/.env"] [unique_id "aZmbTu2vt59VWfuyQDZQYQAAAAU"] [Sat Feb 21 16:47:26.744326 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/d/.env"] [unique_id "aZmbTgGCi3q8m6N5kGLURwAAAAY"] [Sat Feb 21 16:47:26.899852 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/data/.env"] [unique_id "aZmbTsaXfeKXosj1URLOZAAAAAQ"] [Sat Feb 21 16:47:26.932941 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/database/.env"] [unique_id "aZmbTpsYisM-Vb7NdNiScwAAAAE"] [Sat Feb 21 16:47:26.961924 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dataset1/.env"] [unique_id "aZmbTu2vt59VWfuyQDZQYgAAAAU"] [Sat Feb 21 16:47:26.989433 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dataset2/.env"] [unique_id "aZmbTgGCi3q8m6N5kGLUSAAAAAY"] [Sat Feb 21 16:47:27.047710 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.075274 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/db.sql"] [unique_id "aZmbT-xZ8aVGL1GXrWCjmQAAAF8"] [Sat Feb 21 16:47:27.106934 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/db_backup.sql"] [unique_id "aZmbT0gDADwSahU77SdC0wAAABY"] [Sat Feb 21 16:47:27.207312 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/debug.log"] [unique_id "aZmbT-2vt59VWfuyQDZQYwAAAAU"] [Sat Feb 21 16:47:27.239852 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.355432 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/default/.env"] [unique_id "aZmbT0gDADwSahU77SdC1AAAABY"] [Sat Feb 21 16:47:27.376108 2026] [security2:error] [pid 2107796:tid 2107796] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbT832sGbo1LuBv-ccDwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:47:27.376173 2026] [security2:error] [pid 2107796:tid 2107796] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbT832sGbo1LuBv-ccDwAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:47:27.384866 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/delivery/.env"] [unique_id "aZmbT8aXfeKXosj1URLOZgAAAAQ"] [Sat Feb 21 16:47:27.412146 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/demo-app/.env"] [unique_id "aZmbT-2vt59VWfuyQDZQZAAAAAU"] [Sat Feb 21 16:47:27.441368 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/demo/.env"] [unique_id "aZmbTwGCi3q8m6N5kGLUSgAAAAY"] [Sat Feb 21 16:47:27.470660 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.509145 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.551874 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/deploy/.env"] [unique_id "aZmbT0gDADwSahU77SdC1QAAABY"] [Sat Feb 21 16:47:27.643648 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dev-env/.env"] [unique_id "aZmbT-2vt59VWfuyQDZQZQAAAAU"] [Sat Feb 21 16:47:27.674898 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.717643 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dev/.env.local"] [unique_id "aZmbT2_8bsSUFLS0rAkpowAAAAI"] [Sat Feb 21 16:47:27.751633 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dev_env/.env"] [unique_id "aZmbT-xZ8aVGL1GXrWCjnAAAAF8"] [Sat Feb 21 16:47:27.782488 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.811377 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/developer/.env"] [unique_id "aZmbT6ZVBfJziZ97elz8KQAAAAc"] [Sat Feb 21 16:47:27.850195 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/developerslv/.env"] [unique_id "aZmbT9pGmemyPzimpI2QFwAAAAA"] [Sat Feb 21 16:47:27.882351 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/development/.env"] [unique_id "aZmbT-2vt59VWfuyQDZQZgAAAAU"] [Sat Feb 21 16:47:27.912874 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:27.974497 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/directories/.env"] [unique_id "aZmbT-xZ8aVGL1GXrWCjnQAAAF8"] [Sat Feb 21 16:47:28.002948 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dist/.env"] [unique_id "aZmbUM32sGbo1LuBv-ccEgAAAAg"] [Sat Feb 21 16:47:28.075701 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/django-blog/.env"] [unique_id "aZmbUO2vt59VWfuyQDZQZwAAAAU"] [Sat Feb 21 16:47:28.104148 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/django/.env"] [unique_id "aZmbUEgDADwSahU77SdC1wAAABY"] [Sat Feb 21 16:47:28.134897 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/django_project_path/.env"] [unique_id "aZmbUAGCi3q8m6N5kGLUTQAAAAY"] [Sat Feb 21 16:47:28.172281 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/doc/.env"] [unique_id "aZmbUG_8bsSUFLS0rAkppQAAAAI"] [Sat Feb 21 16:47:28.231629 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker-compose/.env"] [unique_id "aZmbUM32sGbo1LuBv-ccEwAAAAg"] [Sat Feb 21 16:47:28.263717 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker-compose/platform/.env"] [unique_id "aZmbUNpGmemyPzimpI2QGQAAAAA"] [Sat Feb 21 16:47:28.310510 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker-elk/.env"] [unique_id "aZmbUO2vt59VWfuyQDZQaAAAAAU"] [Sat Feb 21 16:47:28.341253 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker-network-healthcheck/.env"] [unique_id "aZmbUKZVBfJziZ97elz8KwAAAAc"] [Sat Feb 21 16:47:28.369458 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker-node-mongo-redis/.env"] [unique_id "aZmbUAGCi3q8m6N5kGLUTgAAAAY"] [Sat Feb 21 16:47:28.399314 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/compose/withMongo/.env"] [unique_id "aZmbUG_8bsSUFLS0rAkppgAAAAI"] [Sat Feb 21 16:47:28.428334 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/compose/withPostgres/.env"] [unique_id "aZmbUOxZ8aVGL1GXrWCjnwAAAF8"] [Sat Feb 21 16:47:28.658171 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/database/.env"] [unique_id "aZmbUNpGmemyPzimpI2QGgAAAAA"] [Sat Feb 21 16:47:28.707734 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/db/.env"] [unique_id "aZmbUKZVBfJziZ97elz8LAAAAAc"] [Sat Feb 21 16:47:28.762474 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/dev/.env"] [unique_id "aZmbUAGCi3q8m6N5kGLUTwAAAAY"] [Sat Feb 21 16:47:28.810071 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/examples/compose/.env"] [unique_id "aZmbUG_8bsSUFLS0rAkppwAAAAI"] [Sat Feb 21 16:47:28.845264 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/postgres/.env"] [unique_id "aZmbUMaXfeKXosj1URLOaQAAAAQ"] [Sat Feb 21 16:47:28.901537 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docker/webdav/.env"] [unique_id "aZmbUOxZ8aVGL1GXrWCjoAAAAF8"] [Sat Feb 21 16:47:28.932518 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/docs/.env"] [unique_id "aZmbUNpGmemyPzimpI2QGwAAAAA"] [Sat Feb 21 16:47:28.960243 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dodoswap-client/.env"] [unique_id "aZmbUO2vt59VWfuyQDZQagAAAAU"] [Sat Feb 21 16:47:28.986018 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/dotfiles/.env"] [unique_id "aZmbUKZVBfJziZ97elz8LQAAAAc"] [Sat Feb 21 16:47:29.019721 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /download/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/download/.env"] [unique_id "aZmbUQGCi3q8m6N5kGLUUAAAAAY"] [Sat Feb 21 16:47:29.048327 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/downloads/.env"] [unique_id "aZmbUW_8bsSUFLS0rAkpqAAAAAI"] [Sat Feb 21 16:47:29.078518 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/drupal/.env"] [unique_id "aZmbUcaXfeKXosj1URLOagAAAAQ"] [Sat Feb 21 16:47:29.109093 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/dump.sql"] [unique_id "aZmbUUgDADwSahU77SdC2gAAABY"] [Sat Feb 21 16:47:29.138284 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/e2e/.env"] [unique_id "aZmbUdpGmemyPzimpI2QHAAAAAA"] [Sat Feb 21 16:47:29.170030 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/en/.env"] [unique_id "aZmbUe2vt59VWfuyQDZQawAAAAU"] [Sat Feb 21 16:47:29.199289 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /engine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/engine/.env"] [unique_id "aZmbUaZVBfJziZ97elz8LgAAAAc"] [Sat Feb 21 16:47:29.320813 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "aZmbUUgDADwSahU77SdC2wAAABY"] [Sat Feb 21 16:47:29.354498 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/env/dockers/php-apache/.env"] [unique_id "aZmbUZsYisM-Vb7NdNiSdgAAAAE"] [Sat Feb 21 16:47:29.381728 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/env/example/.env"] [unique_id "aZmbUe2vt59VWfuyQDZQbAAAAAU"] [Sat Feb 21 16:47:29.409408 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/env/template/.env"] [unique_id "aZmbUexZ8aVGL1GXrWCjogAAAF8"] [Sat Feb 21 16:47:29.439934 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/environments/local/.env"] [unique_id "aZmbUaZVBfJziZ97elz8LwAAAAc"] [Sat Feb 21 16:47:29.470478 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/environments/production/.env"] [unique_id "aZmbUQGCi3q8m6N5kGLUUgAAAAY"] [Sat Feb 21 16:47:29.497365 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /envs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/envs/.env"] [unique_id "aZmbUW_8bsSUFLS0rAkpqgAAAAI"] [Sat Feb 21 16:47:29.525718 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/error.log"] [unique_id "aZmbUcaXfeKXosj1URLObAAAAAQ"] [Sat Feb 21 16:47:29.555417 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/error/.env"] [unique_id "aZmbUUgDADwSahU77SdC3AAAABY"] [Sat Feb 21 16:47:29.583142 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/errors/.env"] [unique_id "aZmbUe2vt59VWfuyQDZQbQAAAAU"] [Sat Feb 21 16:47:29.614387 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/example/.env"] [unique_id "aZmbUdpGmemyPzimpI2QHgAAAAA"] [Sat Feb 21 16:47:29.641329 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "aZmbUaZVBfJziZ97elz8MAAAAAc"] [Sat Feb 21 16:47:29.671563 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "aZmbUQGCi3q8m6N5kGLUUwAAAAY"] [Sat Feb 21 16:47:29.701174 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "aZmbUW_8bsSUFLS0rAkpqwAAAAI"] [Sat Feb 21 16:47:29.729120 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/.env"] [unique_id "aZmbUcaXfeKXosj1URLObQAAAAQ"] [Sat Feb 21 16:47:29.762467 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/01-simple-model/.env"] [unique_id "aZmbUUgDADwSahU77SdC3QAAABY"] [Sat Feb 21 16:47:29.795362 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/02-complex-example/.env"] [unique_id "aZmbUe2vt59VWfuyQDZQbgAAAAU"] [Sat Feb 21 16:47:29.825071 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "aZmbUdpGmemyPzimpI2QHwAAAAA"] [Sat Feb 21 16:47:29.858232 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "aZmbUaZVBfJziZ97elz8MQAAAAc"] [Sat Feb 21 16:47:29.889287 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/05-migrations/.env"] [unique_id "aZmbUQGCi3q8m6N5kGLUVAAAAAY"] [Sat Feb 21 16:47:29.918450 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/06-base-service/.env"] [unique_id "aZmbUW_8bsSUFLS0rAkprAAAAAI"] [Sat Feb 21 16:47:29.948774 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/07-feature-flags/.env"] [unique_id "aZmbUcaXfeKXosj1URLObgAAAAQ"] [Sat Feb 21 16:47:29.983356 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/08-performance/.env"] [unique_id "aZmbUUgDADwSahU77SdC3gAAABY"] [Sat Feb 21 16:47:30.014719 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/09-production/.env"] [unique_id "aZmbUu2vt59VWfuyQDZQbwAAAAU"] [Sat Feb 21 16:47:30.044732 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/10-subscriptions/.env"] [unique_id "aZmbUtpGmemyPzimpI2QIAAAAAA"] [Sat Feb 21 16:47:30.073527 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/11-transactions/.env"] [unique_id "aZmbUqZVBfJziZ97elz8MgAAAAc"] [Sat Feb 21 16:47:30.101188 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/drupal-separate-services/.env"] [unique_id "aZmbUgGCi3q8m6N5kGLUVQAAAAY"] [Sat Feb 21 16:47:30.132693 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "aZmbUsaXfeKXosj1URLObwAAAAQ"] [Sat Feb 21 16:47:30.161420 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/sdl-first/.env"] [unique_id "aZmbUs32sGbo1LuBv-ccFwAAAAg"] [Sat Feb 21 16:47:30.189441 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "aZmbUkgDADwSahU77SdC3wAAABY"] [Sat Feb 21 16:47:30.217927 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "aZmbUu2vt59VWfuyQDZQcAAAAAU"] [Sat Feb 21 16:47:30.250596 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/web/.env"] [unique_id "aZmbUtpGmemyPzimpI2QIQAAAAA"] [Sat Feb 21 16:47:30.282081 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "aZmbUqZVBfJziZ97elz8MwAAAAc"] [Sat Feb 21 16:47:30.313521 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/with-dotenv/.env"] [unique_id "aZmbUgGCi3q8m6N5kGLUVgAAAAY"] [Sat Feb 21 16:47:30.340349 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "aZmbUsaXfeKXosj1URLOcAAAAAQ"] [Sat Feb 21 16:47:30.369152 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "aZmbUs32sGbo1LuBv-ccGAAAAAg"] [Sat Feb 21 16:47:30.395973 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/with-relay-modern/.env"] [unique_id "aZmbUu2vt59VWfuyQDZQcQAAAAU"] [Sat Feb 21 16:47:30.422416 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "aZmbUm_8bsSUFLS0rAkprgAAAAI"] [Sat Feb 21 16:47:30.451141 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/exapi/.env"] [unique_id "aZmbUtpGmemyPzimpI2QIgAAAAA"] [Sat Feb 21 16:47:30.480864 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Exercise.Frontend/.env"] [unique_id "aZmbUqZVBfJziZ97elz8NAAAAAc"] [Sat Feb 21 16:47:30.508644 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZmbUgGCi3q8m6N5kGLUVwAAAAY"] [Sat Feb 21 16:47:30.539056 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/export/.env"] [unique_id "aZmbUsaXfeKXosj1URLOcQAAAAQ"] [Sat Feb 21 16:47:30.566731 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fastlane/.env"] [unique_id "aZmbUs32sGbo1LuBv-ccGQAAAAg"] [Sat Feb 21 16:47:30.594690 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/favicons/.env"] [unique_id "aZmbUu2vt59VWfuyQDZQcgAAAAU"] [Sat Feb 21 16:47:30.622153 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/favs/.env"] [unique_id "aZmbUm_8bsSUFLS0rAkprwAAAAI"] [Sat Feb 21 16:47:30.652947 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/FE/huey/.env"] [unique_id "aZmbUkgDADwSahU77SdC4QAAABY"] [Sat Feb 21 16:47:30.684987 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fedex/.env"] [unique_id "aZmbUqZVBfJziZ97elz8NQAAAAc"] [Sat Feb 21 16:47:30.715073 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fhir-api/.env"] [unique_id "aZmbUgGCi3q8m6N5kGLUWAAAAAY"] [Sat Feb 21 16:47:30.744671 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/files/.env"] [unique_id "aZmbUsaXfeKXosj1URLOcgAAAAQ"] [Sat Feb 21 16:47:30.774728 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fileserver/.env"] [unique_id "aZmbUs32sGbo1LuBv-ccGgAAAAg"] [Sat Feb 21 16:47:30.800438 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/films/.env"] [unique_id "aZmbUu2vt59VWfuyQDZQcwAAAAU"] [Sat Feb 21 16:47:30.827661 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "aZmbUuxZ8aVGL1GXrWCjpQAAAF8"] [Sat Feb 21 16:47:30.856634 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "aZmbUm_8bsSUFLS0rAkpsAAAAAI"] [Sat Feb 21 16:47:30.885452 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZmbUkgDADwSahU77SdC4gAAABY"] [Sat Feb 21 16:47:30.886247 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZmbUkgDADwSahU77SdC4gAAABY"] [Sat Feb 21 16:47:30.886298 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZmbUkgDADwSahU77SdC4gAAABY"] [Sat Feb 21 16:47:30.920215 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "aZmbUgGCi3q8m6N5kGLUWQAAAAY"] [Sat Feb 21 16:47:30.980059 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/first-network/.env"] [unique_id "aZmbUtpGmemyPzimpI2QJAAAAAA"] [Sat Feb 21 16:47:31.013144 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/FIRST_CONFIG/.env"] [unique_id "aZmbU-2vt59VWfuyQDZQdAAAAAU"] [Sat Feb 21 16:47:31.048564 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fisdom/fisdom/.env"] [unique_id "aZmbU-xZ8aVGL1GXrWCjpgAAAF8"] [Sat Feb 21 16:47:31.084163 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fixtures/blocks/.env"] [unique_id "aZmbU2_8bsSUFLS0rAkpsQAAAAI"] [Sat Feb 21 16:47:31.113470 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "aZmbU0gDADwSahU77SdC4wAAABY"] [Sat Feb 21 16:47:31.141569 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fixtures/flight/.env"] [unique_id "aZmbUwGCi3q8m6N5kGLUWgAAAAY"] [Sat Feb 21 16:47:31.171407 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fixtures/kitchensink/.env"] [unique_id "aZmbU8aXfeKXosj1URLOdAAAAAQ"] [Sat Feb 21 16:47:31.200832 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/flask/.env"] [unique_id "aZmbU9pGmemyPzimpI2QJQAAAAA"] [Sat Feb 21 16:47:31.230485 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/flask_test_uploads/.env"] [unique_id "aZmbU-2vt59VWfuyQDZQdQAAAAU"] [Sat Feb 21 16:47:31.258380 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fm/.env"] [unique_id "aZmbU-xZ8aVGL1GXrWCjpwAAAF8"] [Sat Feb 21 16:47:31.285479 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/font-icons/.env"] [unique_id "aZmbU2_8bsSUFLS0rAkpsgAAAAI"] [Sat Feb 21 16:47:31.311640 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/fonts/.env"] [unique_id "aZmbU0gDADwSahU77SdC5AAAABY"] [Sat Feb 21 16:47:31.341423 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /framework/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/framework/.env"] [unique_id "aZmbUwGCi3q8m6N5kGLUWwAAAAY"] [Sat Feb 21 16:47:31.369557 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/front-app/.env"] [unique_id "aZmbU8aXfeKXosj1URLOdQAAAAQ"] [Sat Feb 21 16:47:31.398357 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/front-empathy/.env"] [unique_id "aZmbU9pGmemyPzimpI2QJgAAAAA"] [Sat Feb 21 16:47:31.429092 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/front-end/.env"] [unique_id "aZmbU-2vt59VWfuyQDZQdgAAAAU"] [Sat Feb 21 16:47:31.458702 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/front/.env"] [unique_id "aZmbU-xZ8aVGL1GXrWCjqAAAAF8"] [Sat Feb 21 16:47:31.485548 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/front/src/.env"] [unique_id "aZmbU2_8bsSUFLS0rAkpswAAAAI"] [Sat Feb 21 16:47:31.514645 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/frontend/momentum-fe/.env"] [unique_id "aZmbU0gDADwSahU77SdC5QAAABY"] [Sat Feb 21 16:47:31.541513 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/frontend/react/.env"] [unique_id "aZmbUwGCi3q8m6N5kGLUXAAAAAY"] [Sat Feb 21 16:47:31.570717 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/frontend/vue/.env"] [unique_id "aZmbU8aXfeKXosj1URLOdgAAAAQ"] [Sat Feb 21 16:47:31.629967 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/frontendfinaltest/.env"] [unique_id "aZmbU-2vt59VWfuyQDZQdwAAAAU"] [Sat Feb 21 16:47:31.663005 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ftp/.env"] [unique_id "aZmbU-xZ8aVGL1GXrWCjqQAAAF8"] [Sat Feb 21 16:47:31.692685 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ftpmaster/.env"] [unique_id "aZmbU2_8bsSUFLS0rAkptAAAAAI"] [Sat Feb 21 16:47:31.720038 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /functions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/functions/.env"] [unique_id "aZmbUwGCi3q8m6N5kGLUXQAAAAY"] [Sat Feb 21 16:47:31.782770 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gcp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/gcp/.env"] [unique_id "aZmbU8aXfeKXosj1URLOdwAAAAQ"] [Sat Feb 21 16:47:31.889170 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/github-connect/.env"] [unique_id "aZmbU2_8bsSUFLS0rAkptQAAAAI"] [Sat Feb 21 16:47:31.917797 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /google/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/google/.env"] [unique_id "aZmbUwGCi3q8m6N5kGLUXgAAAAY"] [Sat Feb 21 16:47:32.014651 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/grems-api/.env"] [unique_id "aZmbVNpGmemyPzimpI2QKQAAAAA"] [Sat Feb 21 16:47:32.044167 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/grems-frontend/.env"] [unique_id "aZmbVO2vt59VWfuyQDZQeQAAAAU"] [Sat Feb 21 16:47:32.074523 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Hash/.env"] [unique_id "aZmbVM32sGbo1LuBv-ccHAAAAAg"] [Sat Feb 21 16:47:32.101565 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/hasura/.env"] [unique_id "aZmbVG_8bsSUFLS0rAkptgAAAAI"] [Sat Feb 21 16:47:32.159654 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Helmetjs/.env"] [unique_id "aZmbVMaXfeKXosj1URLOeQAAAAQ"] [Sat Feb 21 16:47:32.189942 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/hgs-static/.env"] [unique_id "aZmbVEgDADwSahU77SdC6AAAABY"] [Sat Feb 21 16:47:32.217175 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/higlass-website/.env"] [unique_id "aZmbVNpGmemyPzimpI2QKgAAAAA"] [Sat Feb 21 16:47:32.249410 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/home/.env"] [unique_id "aZmbVKZVBfJziZ97elz8OwAAAAc"] [Sat Feb 21 16:47:32.277662 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/horde/.env"] [unique_id "aZmbVM32sGbo1LuBv-ccHQAAAAg"] [Sat Feb 21 16:47:32.307382 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/hotpot-app-frontend/.env"] [unique_id "aZmbVG_8bsSUFLS0rAkptwAAAAI"] [Sat Feb 21 16:47:32.338151 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/htdocs/.env"] [unique_id "aZmbVAGCi3q8m6N5kGLUYAAAAAY"] [Sat Feb 21 16:47:32.370368 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/html/.env"] [unique_id "aZmbVMaXfeKXosj1URLOegAAAAQ"] [Sat Feb 21 16:47:32.399244 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/http/.env"] [unique_id "aZmbVEgDADwSahU77SdC6QAAABY"] [Sat Feb 21 16:47:32.430011 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/httpboot/.env"] [unique_id "aZmbVNpGmemyPzimpI2QKwAAAAA"] [Sat Feb 21 16:47:32.462294 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/httpdocs/.env"] [unique_id "aZmbVKZVBfJziZ97elz8PAAAAAc"] [Sat Feb 21 16:47:32.489534 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/HUNIV_migration/.env"] [unique_id "aZmbVG_8bsSUFLS0rAkpuAAAAAI"] [Sat Feb 21 16:47:32.521379 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:32.552529 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/icon/.env"] [unique_id "aZmbVAGCi3q8m6N5kGLUYQAAAAY"] [Sat Feb 21 16:47:32.583641 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/icons/.env"] [unique_id "aZmbVMaXfeKXosj1URLOewAAAAQ"] [Sat Feb 21 16:47:32.613050 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ikiwiki/.env"] [unique_id "aZmbVEgDADwSahU77SdC6gAAABY"] [Sat Feb 21 16:47:32.642468 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/image_data/.env"] [unique_id "aZmbVNpGmemyPzimpI2QLAAAAAA"] [Sat Feb 21 16:47:32.669194 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Imagebord/.env"] [unique_id "aZmbVKZVBfJziZ97elz8PQAAAAc"] [Sat Feb 21 16:47:32.711186 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/images/.env"] [unique_id "aZmbVG_8bsSUFLS0rAkpuQAAAAI"] [Sat Feb 21 16:47:32.757418 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/img/.env"] [unique_id "aZmbVAGCi3q8m6N5kGLUYgAAAAY"] [Sat Feb 21 16:47:32.805612 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:32.852547 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:32.881815 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/includes/.env"] [unique_id "aZmbVEgDADwSahU77SdC6wAAABY"] [Sat Feb 21 16:47:32.937518 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:32.997835 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.027619 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.059542 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.086996 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.118614 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.151914 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.180394 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.210888 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.237403 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.266343 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/install/.env"] [unique_id "aZmbVcaXfeKXosj1URLOfgAAAAQ"] [Sat Feb 21 16:47:33.298112 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/InstantCV/server/.env"] [unique_id "aZmbVZsYisM-Vb7NdNiSeQAAAAE"] [Sat Feb 21 16:47:33.419240 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.444739 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/items/.env"] [unique_id "aZmbVW_8bsSUFLS0rAkpvAAAAAI"] [Sat Feb 21 16:47:33.474348 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/javascript/.env"] [unique_id "aZmbVe2vt59VWfuyQDZQfwAAAAU"] [Sat Feb 21 16:47:33.500267 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jenkins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/jenkins/.env"] [unique_id "aZmbVcaXfeKXosj1URLOfwAAAAQ"] [Sat Feb 21 16:47:33.529792 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:33.559601 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/joomla/.env"] [unique_id "aZmbVUgDADwSahU77SdC7gAAABY"] [Sat Feb 21 16:47:33.586422 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js-plugin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/js-plugin/.env"] [unique_id "aZmbVc32sGbo1LuBv-ccIgAAAAg"] [Sat Feb 21 16:47:33.834546 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jsrelay/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/jsrelay/.env"] [unique_id "aZmbVdpGmemyPzimpI2QMQAAAAA"] [Sat Feb 21 16:47:33.863786 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jupyter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/jupyter/.env"] [unique_id "aZmbVaZVBfJziZ97elz8QgAAAAc"] [Sat Feb 21 16:47:33.891405 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /khanlinks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/khanlinks/.env"] [unique_id "aZmbVexZ8aVGL1GXrWCjrQAAAF8"] [Sat Feb 21 16:47:33.919017 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kibana/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/kibana/.env"] [unique_id "aZmbVW_8bsSUFLS0rAkpvgAAAAI"] [Sat Feb 21 16:47:33.950276 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kodenames-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/kodenames-server/.env"] [unique_id "aZmbVe2vt59VWfuyQDZQgQAAAAU"] [Sat Feb 21 16:47:33.980199 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kolab-syncroton/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/kolab-syncroton/.env"] [unique_id "aZmbVcaXfeKXosj1URLOgQAAAAQ"] [Sat Feb 21 16:47:34.009284 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Kubernetes/.env"] [unique_id "aZmbVpsYisM-Vb7NdNiSfAAAAAE"] [Sat Feb 21 16:47:34.041147 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/kubernetes/.env"] [unique_id "aZmbVs32sGbo1LuBv-ccJAAAAAg"] [Sat Feb 21 16:47:34.072392 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:34.103367 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/lab/.env"] [unique_id "aZmbVkgDADwSahU77SdC8AAAABY"] [Sat Feb 21 16:47:34.131613 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/lambda/.env"] [unique_id "aZmbVuxZ8aVGL1GXrWCjrgAAAF8"] [Sat Feb 21 16:47:34.160378 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /latest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/latest/.env"] [unique_id "aZmbVm_8bsSUFLS0rAkpvwAAAAI"] [Sat Feb 21 16:47:34.190547 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /layout/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/layout/.env"] [unique_id "aZmbVu2vt59VWfuyQDZQggAAAAU"] [Sat Feb 21 16:47:34.220534 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/lcomernbootcamp/projbackend/.env"] [unique_id "aZmbVsaXfeKXosj1URLOggAAAAQ"] [Sat Feb 21 16:47:34.253439 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /leafer-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/leafer-app/.env"] [unique_id "aZmbVpsYisM-Vb7NdNiSfQAAAAE"] [Sat Feb 21 16:47:34.281922 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ledger_sync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ledger_sync/.env"] [unique_id "aZmbVs32sGbo1LuBv-ccJQAAAAg"] [Sat Feb 21 16:47:34.365457 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /legal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/legal/.env"] [unique_id "aZmbVgGCi3q8m6N5kGLUaAAAAAY"] [Sat Feb 21 16:47:34.395093 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/lemonldap-ng-doc/.env"] [unique_id "aZmbVm_8bsSUFLS0rAkpwAAAAAI"] [Sat Feb 21 16:47:34.422506 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-fr-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "aZmbVu2vt59VWfuyQDZQgwAAAAU"] [Sat Feb 21 16:47:34.451795 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /letsencrypt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/letsencrypt/.env"] [unique_id "aZmbVsaXfeKXosj1URLOgwAAAAQ"] [Sat Feb 21 16:47:34.481672 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/lib/.env"] [unique_id "aZmbVpsYisM-Vb7NdNiSfgAAAAE"] [Sat Feb 21 16:47:34.538525 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libraries/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/libraries/.env"] [unique_id "aZmbVtpGmemyPzimpI2QNAAAAAA"] [Sat Feb 21 16:47:34.568429 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Library/.env"] [unique_id "aZmbVuxZ8aVGL1GXrWCjsAAAAF8"] [Sat Feb 21 16:47:34.596471 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/libs/.env"] [unique_id "aZmbVgGCi3q8m6N5kGLUaQAAAAY"] [Sat Feb 21 16:47:34.629170 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:34.658866 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:34.689633 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /linux/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/linux/.env"] [unique_id "aZmbVsaXfeKXosj1URLOhAAAAAQ"] [Sat Feb 21 16:47:34.747100 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /localhost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/localhost/.env"] [unique_id "aZmbVs32sGbo1LuBv-ccJwAAAAg"] [Sat Feb 21 16:47:34.777853 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /locally/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/locally/.env"] [unique_id "aZmbVtpGmemyPzimpI2QNQAAAAA"] [Sat Feb 21 16:47:34.835299 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /log/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/log/.env"] [unique_id "aZmbVkgDADwSahU77SdC8wAAABY"] [Sat Feb 21 16:47:34.864827 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/log/development.log"] [unique_id "aZmbVu2vt59VWfuyQDZQhQAAAAU"] [Sat Feb 21 16:47:34.892770 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/logging/.env"] [unique_id "aZmbVsaXfeKXosj1URLOhQAAAAQ"] [Sat Feb 21 16:47:34.946496 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/login/.env"] [unique_id "aZmbVpsYisM-Vb7NdNiSgAAAAAE"] [Sat Feb 21 16:47:35.004284 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/logs/.env"] [unique_id "aZmbV9pGmemyPzimpI2QNgAAAAA"] [Sat Feb 21 16:47:35.031129 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/logs/access.log"] [unique_id "aZmbVwGCi3q8m6N5kGLUawAAAAY"] [Sat Feb 21 16:47:35.062400 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/logs/app.log"] [unique_id "aZmbV0gDADwSahU77SdC9AAAABY"] [Sat Feb 21 16:47:35.091564 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/logs/error.log"] [unique_id "aZmbV-2vt59VWfuyQDZQhgAAAAU"] [Sat Feb 21 16:47:35.122203 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/magento/.env"] [unique_id "aZmbV-xZ8aVGL1GXrWCjsgAAAF8"] [Sat Feb 21 16:47:35.152334 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailinabox/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mailinabox/.env"] [unique_id "aZmbV2_8bsSUFLS0rAkpwwAAAAI"] [Sat Feb 21 16:47:35.184575 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailman/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mailman/.env"] [unique_id "aZmbV5sYisM-Vb7NdNiSgQAAAAE"] [Sat Feb 21 16:47:35.184843 2026] [cgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH02811: stderr from /usr/local/cpanel/3rdparty/mailman/cgi-bin/.env: script not found or unable to stat [Sat Feb 21 16:47:35.184915 2026] [core:crit] [pid 2110069:tid 2110069] (13)Permission denied: [client 185.177.72.30:0] AH00529: /home/brightwaypk/public_html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/brightwaypk/public_html/' is executable [Sat Feb 21 16:47:35.580920 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:35.639856 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/main_user/.env"] [unique_id "aZmbV5sYisM-Vb7NdNiSgwAAAAE"] [Sat Feb 21 16:47:35.731663 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /manual/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/manual/.env"] [unique_id "aZmbV2_8bsSUFLS0rAkpxQAAAAI"] [Sat Feb 21 16:47:35.762862 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /master/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/master/.env"] [unique_id "aZmbVwGCi3q8m6N5kGLUbgAAAAY"] [Sat Feb 21 16:47:35.791377 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/media/.env"] [unique_id "aZmbV0gDADwSahU77SdC9wAAABY"] [Sat Feb 21 16:47:35.818200 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /memcached/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/memcached/.env"] [unique_id "aZmbV-2vt59VWfuyQDZQiQAAAAU"] [Sat Feb 21 16:47:35.845025 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mentorg-lava-docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mentorg-lava-docker/.env"] [unique_id "aZmbV-xZ8aVGL1GXrWCjtQAAAF8"] [Sat Feb 21 16:47:35.875385 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react-communication/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/micro-app-react-communication/.env"] [unique_id "aZmbV8aXfeKXosj1URLOiQAAAAQ"] [Sat Feb 21 16:47:35.906047 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/micro-app-react/.env"] [unique_id "aZmbV9pGmemyPzimpI2QOgAAAAA"] [Sat Feb 21 16:47:35.934951 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mindsweeper/gui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mindsweeper/gui/.env"] [unique_id "aZmbV2_8bsSUFLS0rAkpxgAAAAI"] [Sat Feb 21 16:47:35.965517 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /minified/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/minified/.env"] [unique_id "aZmbVwGCi3q8m6N5kGLUbwAAAAY"] [Sat Feb 21 16:47:35.993567 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /misc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/misc/.env"] [unique_id "aZmbV832sGbo1LuBv-ccLAAAAAg"] [Sat Feb 21 16:47:36.022973 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Modix/ClientApp/.env"] [unique_id "aZmbWEgDADwSahU77SdC-AAAABY"] [Sat Feb 21 16:47:36.056867 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monerod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/monerod/.env"] [unique_id "aZmbWO2vt59VWfuyQDZQigAAAAU"] [Sat Feb 21 16:47:36.086931 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mongodb/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/mongodb/config/dev/.env"] [unique_id "aZmbWOxZ8aVGL1GXrWCjtgAAAF8"] [Sat Feb 21 16:47:36.115924 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monitoring/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/monitoring/compose/.env"] [unique_id "aZmbWMaXfeKXosj1URLOigAAAAQ"] [Sat Feb 21 16:47:36.145580 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /moodledata/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/moodledata/.env"] [unique_id "aZmbWNpGmemyPzimpI2QOwAAAAA"] [Sat Feb 21 16:47:36.176011 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /msks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/msks/.env"] [unique_id "aZmbWG_8bsSUFLS0rAkpxwAAAAI"] [Sat Feb 21 16:47:36.203081 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /munki_repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/munki_repo/.env"] [unique_id "aZmbWJsYisM-Vb7NdNiShQAAAAE"] [Sat Feb 21 16:47:36.231102 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /music/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/music/.env"] [unique_id "aZmbWAGCi3q8m6N5kGLUcAAAAAY"] [Sat Feb 21 16:47:36.262978 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "aZmbWM32sGbo1LuBv-ccLQAAAAg"] [Sat Feb 21 16:47:36.317711 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /name/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/name/.env"] [unique_id "aZmbWOxZ8aVGL1GXrWCjtwAAAF8"] [Sat Feb 21 16:47:36.347826 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/nest/.env"] [unique_id "aZmbWMaXfeKXosj1URLOiwAAAAQ"] [Sat Feb 21 16:47:36.405038 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new-js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/new-js/.env"] [unique_id "aZmbWG_8bsSUFLS0rAkpyAAAAAI"] [Sat Feb 21 16:47:36.434235 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:36.464705 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /news-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/news-app/.env"] [unique_id "aZmbWM32sGbo1LuBv-ccLgAAAAg"] [Sat Feb 21 16:47:36.495149 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/next/.env"] [unique_id "aZmbWO2vt59VWfuyQDZQjAAAAAU"] [Sat Feb 21 16:47:36.524447 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/nginx-server/.env"] [unique_id "aZmbWMaXfeKXosj1URLOjAAAAAQ"] [Sat Feb 21 16:47:36.554844 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /niffler-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/niffler-frontend/.env"] [unique_id "aZmbWEgDADwSahU77SdC-gAAABY"] [Sat Feb 21 16:47:36.582876 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/node_modules/.env"] [unique_id "aZmbWNpGmemyPzimpI2QPQAAAAA"] [Sat Feb 21 16:47:36.609122 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "aZmbWG_8bsSUFLS0rAkpyQAAAAI"] [Sat Feb 21 16:47:36.637555 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "aZmbWAGCi3q8m6N5kGLUcgAAAAY"] [Sat Feb 21 16:47:36.669241 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /novnc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/noVNC/.env"] [unique_id "aZmbWM32sGbo1LuBv-ccLwAAAAg"] [Sat Feb 21 16:47:36.728725 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Nuke.App.Ui/.env"] [unique_id "aZmbWJsYisM-Vb7NdNiShwAAAAE"] [Sat Feb 21 16:47:36.761974 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/nuxt/.env"] [unique_id "aZmbWMaXfeKXosj1URLOjQAAAAQ"] [Sat Feb 21 16:47:36.792342 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:36.822219 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:36.852021 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:36.905630 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/old/.env"] [unique_id "aZmbWO2vt59VWfuyQDZQjgAAAAU"] [Sat Feb 21 16:47:36.934876 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:36.998641 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /oldsanta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/oldsanta/.env"] [unique_id "aZmbWG_8bsSUFLS0rAkpywAAAAI"] [Sat Feb 21 16:47:37.051001 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opencart/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/opencart/.env"] [unique_id "aZmbWaZVBfJziZ97elz8SAAAAAc"] [Sat Feb 21 16:47:37.080816 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ops/vagrant/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ops/vagrant/.env"] [unique_id "aZmbWUgDADwSahU77SdC_AAAABY"] [Sat Feb 21 16:47:37.114269 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /option/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/option/.env"] [unique_id "aZmbWc32sGbo1LuBv-ccMQAAAAg"] [Sat Feb 21 16:47:37.142659 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /orientdb-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/orientdb-client/.env"] [unique_id "aZmbWe2vt59VWfuyQDZQjwAAAAU"] [Sat Feb 21 16:47:37.170937 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /outputs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/outputs/.env"] [unique_id "aZmbWcaXfeKXosj1URLOjwAAAAQ"] [Sat Feb 21 16:47:37.200636 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /owncloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/owncloud/.env"] [unique_id "aZmbWdpGmemyPzimpI2QQAAAAAA"] [Sat Feb 21 16:47:37.230103 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:37.263411 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/styled-ui-docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/packages/styled-ui-docs/.env"] [unique_id "aZmbWZsYisM-Vb7NdNiSiQAAAAE"] [Sat Feb 21 16:47:37.293723 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/packages/web/.env"] [unique_id "aZmbWUgDADwSahU77SdC_QAAABY"] [Sat Feb 21 16:47:37.327712 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packed/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/packed/.env"] [unique_id "aZmbWc32sGbo1LuBv-ccMgAAAAg"] [Sat Feb 21 16:47:37.356633 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /page-editor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/page-editor/.env"] [unique_id "aZmbWe2vt59VWfuyQDZQkAAAAAU"] [Sat Feb 21 16:47:37.387486 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/panel/.env"] [unique_id "aZmbWcaXfeKXosj1URLOkAAAAAQ"] [Sat Feb 21 16:47:37.419640 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /parity/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/parity/.env"] [unique_id "aZmbWdpGmemyPzimpI2QQQAAAAA"] [Sat Feb 21 16:47:37.446793 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Passportjs/.env"] [unique_id "aZmbWZsYisM-Vb7NdNiSigAAAAE"] [Sat Feb 21 16:47:37.480162 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /patchwork/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/patchwork/.env"] [unique_id "aZmbWUgDADwSahU77SdC_gAAABY"] [Sat Feb 21 16:47:37.508681 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/path/.env"] [unique_id "aZmbWc32sGbo1LuBv-ccMwAAAAg"] [Sat Feb 21 16:47:37.534947 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pfbe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/pfbe/.env"] [unique_id "aZmbWe2vt59VWfuyQDZQkQAAAAU"] [Sat Feb 21 16:47:37.562924 2026] [authz_core:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01630: client denied by server configuration: /home/brightwaypk/public_html/php.ini [Sat Feb 21 16:47:37.595992 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:37.627610 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:37.691906 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:37.810470 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:37.846952 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:37.978682 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.011135 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.043612 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.081337 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.113719 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.141741 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.262078 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.374884 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.404402 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.430172 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:38.464370 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pictures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/pictures/.env"] [unique_id "aZmbWqZVBfJziZ97elz8TgAAAAc"] [Sat Feb 21 16:47:38.492845 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/platform/.env"] [unique_id "aZmbWtpGmemyPzimpI2QRgAAAAA"] [Sat Feb 21 16:47:38.527141 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /playground/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/playground/.env"] [unique_id "aZmbWu2vt59VWfuyQDZQlQAAAAU"] [Sat Feb 21 16:47:38.528120 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/playground/.env"] [unique_id "aZmbWu2vt59VWfuyQDZQlQAAAAU"] [Sat Feb 21 16:47:38.542617 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/playground/.env"] [unique_id "aZmbWu2vt59VWfuyQDZQlQAAAAU"] [Sat Feb 21 16:47:38.576981 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugin_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/plugin_static/.env"] [unique_id "aZmbWkgDADwSahU77SdDAwAAABY"] [Sat Feb 21 16:47:38.615887 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/plugins/.env"] [unique_id "aZmbWs32sGbo1LuBv-ccOAAAAAg"] [Sat Feb 21 16:47:38.647526 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /post-deployment/.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/post-deployment/.vscode/.env"] [unique_id "aZmbWm_8bsSUFLS0rAkp0gAAAAI"] [Sat Feb 21 16:47:38.681857 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postfixadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/postfixadmin/.env"] [unique_id "aZmbWpsYisM-Vb7NdNiSjwAAAAE"] [Sat Feb 21 16:47:38.740594 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/prestashop/.env"] [unique_id "aZmbWqZVBfJziZ97elz8TwAAAAc"] [Sat Feb 21 16:47:38.773316 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/preview-env/.env"] [unique_id "aZmbWtpGmemyPzimpI2QRwAAAAA"] [Sat Feb 21 16:47:38.827105 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/preview/.env"] [unique_id "aZmbWu2vt59VWfuyQDZQlgAAAAU"] [Sat Feb 21 16:47:38.861629 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /price_hawk_client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/price_hawk_client/.env"] [unique_id "aZmbWkgDADwSahU77SdDBAAAABY"] [Sat Feb 21 16:47:38.894084 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/prisma/.env"] [unique_id "aZmbWm_8bsSUFLS0rAkp0wAAAAI"] [Sat Feb 21 16:47:38.936798 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/private.key"] [unique_id "aZmbWpsYisM-Vb7NdNiSkAAAAAE"] [Sat Feb 21 16:47:38.992928 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /processor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/processor/.env"] [unique_id "aZmbWsaXfeKXosj1URLOlgAAAAQ"] [Sat Feb 21 16:47:39.058811 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/prod/.env"] [unique_id "aZmbW9pGmemyPzimpI2QSAAAAAA"] [Sat Feb 21 16:47:39.094061 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/product/.env.staging"] [unique_id "aZmbW-2vt59VWfuyQDZQlwAAAAU"] [Sat Feb 21 16:47:39.127020 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/projbackend/.env"] [unique_id "aZmbW2_8bsSUFLS0rAkp1AAAAAI"] [Sat Feb 21 16:47:39.164160 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/project/.env"] [unique_id "aZmbW5sYisM-Vb7NdNiSkQAAAAE"] [Sat Feb 21 16:47:39.197037 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/project_root/.env"] [unique_id "aZmbW832sGbo1LuBv-ccOgAAAAg"] [Sat Feb 21 16:47:39.223836 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /protected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/protected/.env"] [unique_id "aZmbW8aXfeKXosj1URLOlwAAAAQ"] [Sat Feb 21 16:47:39.254900 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/psnlink/.env"] [unique_id "aZmbW6ZVBfJziZ97elz8UQAAAAc"] [Sat Feb 21 16:47:39.286751 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt2/countries/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/pt2/countries/src/.env"] [unique_id "aZmbW9pGmemyPzimpI2QSQAAAAA"] [Sat Feb 21 16:47:39.317251 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt8/library-backend-gql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/pt8/library-backend-gql/.env"] [unique_id "aZmbWwGCi3q8m6N5kGLUdwAAAAY"] [Sat Feb 21 16:47:39.355717 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pub/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/pub/.env"] [unique_id "aZmbW-2vt59VWfuyQDZQmAAAAAU"] [Sat Feb 21 16:47:39.429983 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/public_html/.env"] [unique_id "aZmbW0gDADwSahU77SdDBgAAABY"] [Sat Feb 21 16:47:39.431313 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/public_html/.env"] [unique_id "aZmbW0gDADwSahU77SdDBgAAABY"] [Sat Feb 21 16:47:39.431440 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/public_html/.env"] [unique_id "aZmbW0gDADwSahU77SdDBgAAABY"] [Sat Feb 21 16:47:39.461306 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/public_root/.env"] [unique_id "aZmbW8aXfeKXosj1URLOmAAAAAQ"] [Sat Feb 21 16:47:39.493769 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:39.525353 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:39.556119 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /question2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/question2/.env"] [unique_id "aZmbWwGCi3q8m6N5kGLUeAAAAAY"] [Sat Feb 21 16:47:39.583743 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qv-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/qv-frontend/.env"] [unique_id "aZmbW5sYisM-Vb7NdNiSkwAAAAE"] [Sat Feb 21 16:47:39.619160 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rabbitmq-cluster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rabbitmq-cluster/.env"] [unique_id "aZmbW0gDADwSahU77SdDBwAAABY"] [Sat Feb 21 16:47:39.652359 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails-api/react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rails-api/react-app/.env"] [unique_id "aZmbW8aXfeKXosj1URLOmQAAAAQ"] [Sat Feb 21 16:47:39.680909 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rails/.env"] [unique_id "aZmbW6ZVBfJziZ97elz8UwAAAAc"] [Sat Feb 21 16:47:39.713640 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rasax/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rasax/.env"] [unique_id "aZmbW9pGmemyPzimpI2QSwAAAAA"] [Sat Feb 21 16:47:39.744547 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/react/.env"] [unique_id "aZmbW832sGbo1LuBv-ccPAAAAAg"] [Sat Feb 21 16:47:39.773770 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react_todo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/react_todo/.env"] [unique_id "aZmbWwGCi3q8m6N5kGLUeQAAAAY"] [Sat Feb 21 16:47:39.809748 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /redmine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/redmine/.env"] [unique_id "aZmbW5sYisM-Vb7NdNiSlAAAAAE"] [Sat Feb 21 16:47:40.041251 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/repo/.env"] [unique_id "aZmbXMaXfeKXosj1URLOmgAAAAQ"] [Sat Feb 21 16:47:40.073274 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/repos/.env"] [unique_id "aZmbXKZVBfJziZ97elz8VAAAAAc"] [Sat Feb 21 16:47:40.101041 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repository/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/repository/.env"] [unique_id "aZmbXO2vt59VWfuyQDZQmgAAAAU"] [Sat Feb 21 16:47:40.129541 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resources/.env"] [unique_id "aZmbXNpGmemyPzimpI2QTAAAAAA"] [Sat Feb 21 16:47:40.161345 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resources/docker/.env"] [unique_id "aZmbXAGCi3q8m6N5kGLUegAAAAY"] [Sat Feb 21 16:47:40.192278 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resources/docker/mysql/.env"] [unique_id "aZmbXJsYisM-Vb7NdNiSlQAAAAE"] [Sat Feb 21 16:47:40.220452 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/phpmyadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resources/docker/phpmyadmin/.env"] [unique_id "aZmbXEgDADwSahU77SdDCQAAABY"] [Sat Feb 21 16:47:40.259379 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rabbitmq/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resources/docker/rabbitmq/.env"] [unique_id "aZmbXMaXfeKXosj1URLOmwAAAAQ"] [Sat Feb 21 16:47:40.287255 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rediscommander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resources/docker/rediscommander/.env"] [unique_id "aZmbXG_8bsSUFLS0rAkp1gAAAAI"] [Sat Feb 21 16:47:40.315106 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resourcesync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/resourcesync/.env"] [unique_id "aZmbXKZVBfJziZ97elz8VQAAAAc"] [Sat Feb 21 16:47:40.353032 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:40.382700 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rest/.env"] [unique_id "aZmbXAGCi3q8m6N5kGLUewAAAAY"] [Sat Feb 21 16:47:40.413331 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /restapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/restapi/.env"] [unique_id "aZmbXJsYisM-Vb7NdNiSlgAAAAE"] [Sat Feb 21 16:47:40.443300 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /results/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/results/.env"] [unique_id "aZmbXEgDADwSahU77SdDCgAAABY"] [Sat Feb 21 16:47:40.508504 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /robots/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/robots/.env"] [unique_id "aZmbXG_8bsSUFLS0rAkp1wAAAAI"] [Sat Feb 21 16:47:40.574588 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/root/.env"] [unique_id "aZmbXNpGmemyPzimpI2QTgAAAAA"] [Sat Feb 21 16:47:40.606143 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rosterback/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rosterBack/.env"] [unique_id "aZmbXAGCi3q8m6N5kGLUfAAAAAY"] [Sat Feb 21 16:47:40.637869 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcube/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/roundcube/.env"] [unique_id "aZmbXJsYisM-Vb7NdNiSlwAAAAE"] [Sat Feb 21 16:47:40.663911 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcubemail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/roundcubemail/.env"] [unique_id "aZmbXOxZ8aVGL1GXrWCjuQAAAF8"] [Sat Feb 21 16:47:40.688990 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /routes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/routes/.env"] [unique_id "aZmbXMaXfeKXosj1URLOnQAAAAQ"] [Sat Feb 21 16:47:40.716235 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /run/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/run/.env"] [unique_id "aZmbXG_8bsSUFLS0rAkp2AAAAAI"] [Sat Feb 21 16:47:40.744206 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rust-backend/.env"] [unique_id "aZmbXKZVBfJziZ97elz8VwAAAAc"] [Sat Feb 21 16:47:40.773603 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/dao/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/rust-backend/dao/.env"] [unique_id "aZmbXM32sGbo1LuBv-ccPwAAAAg"] [Sat Feb 21 16:47:40.799781 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s-with-me-front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/s-with-me-front/.env"] [unique_id "aZmbXNpGmemyPzimpI2QTwAAAAA"] [Sat Feb 21 16:47:40.857393 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/saas/.env"] [unique_id "aZmbXJsYisM-Vb7NdNiSmAAAAAE"] [Sat Feb 21 16:47:40.885802 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/chatroom/chatroom-spa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/samples/chatroom/chatroom-spa/.env"] [unique_id "aZmbXOxZ8aVGL1GXrWCjugAAAF8"] [Sat Feb 21 16:47:40.912685 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/docker/deploymentscripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "aZmbXMaXfeKXosj1URLOngAAAAQ"] [Sat Feb 21 16:47:40.985090 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /script/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/script/.env"] [unique_id "aZmbXEgDADwSahU77SdDDAAAABY"] [Sat Feb 21 16:47:41.014132 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/scripts/.env"] [unique_id "aZmbXc32sGbo1LuBv-ccQAAAAAg"] [Sat Feb 21 16:47:41.044725 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/fvt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/scripts/fvt/.env"] [unique_id "aZmbXdpGmemyPzimpI2QUAAAAAA"] [Sat Feb 21 16:47:41.139901 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /secrets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/secrets/.env"] [unique_id "aZmbXexZ8aVGL1GXrWCjuwAAAF8"] [Sat Feb 21 16:47:41.170337 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /selfish-darling-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/selfish-darling-backend/.env"] [unique_id "aZmbXcaXfeKXosj1URLOnwAAAAQ"] [Sat Feb 21 16:47:41.231167 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve-browserbench/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/serve-browserbench/.env"] [unique_id "aZmbXc32sGbo1LuBv-ccQQAAAAg"] [Sat Feb 21 16:47:41.267414 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Serve_time_server/.env"] [unique_id "aZmbXdpGmemyPzimpI2QUQAAAAA"] [Sat Feb 21 16:47:41.329980 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/server.log"] [unique_id "aZmbXaZVBfJziZ97elz8WQAAAAc"] [Sat Feb 21 16:47:41.359764 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/server/config/.env"] [unique_id "aZmbXZsYisM-Vb7NdNiSmgAAAAE"] [Sat Feb 21 16:47:41.395720 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/server/laravel/.env"] [unique_id "aZmbXexZ8aVGL1GXrWCjvAAAAF8"] [Sat Feb 21 16:47:41.458259 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/src/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/server/src/persistence/.env"] [unique_id "aZmbXW_8bsSUFLS0rAkp2wAAAAI"] [Sat Feb 21 16:47:41.489248 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Server_with_db/.env"] [unique_id "aZmbXdpGmemyPzimpI2QUgAAAAA"] [Sat Feb 21 16:47:41.577714 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/service/.env"] [unique_id "aZmbXaZVBfJziZ97elz8WgAAAAc"] [Sat Feb 21 16:47:41.606901 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/.env"] [unique_id "aZmbXZsYisM-Vb7NdNiSmwAAAAE"] [Sat Feb 21 16:47:41.640165 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/adminer/.env"] [unique_id "aZmbXexZ8aVGL1GXrWCjvQAAAF8"] [Sat Feb 21 16:47:41.670615 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/deployment-agent/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/deployment-agent/.env"] [unique_id "aZmbXcaXfeKXosj1URLOoQAAAAQ"] [Sat Feb 21 16:47:41.700508 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/documents/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/documents/.env"] [unique_id "aZmbXW_8bsSUFLS0rAkp3AAAAAI"] [Sat Feb 21 16:47:41.729300 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/graylog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/graylog/.env"] [unique_id "aZmbXdpGmemyPzimpI2QUwAAAAA"] [Sat Feb 21 16:47:41.760234 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/jaeger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/jaeger/.env"] [unique_id "aZmbXe2vt59VWfuyQDZQngAAAAU"] [Sat Feb 21 16:47:41.790567 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/minio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/minio/.env"] [unique_id "aZmbXaZVBfJziZ97elz8WwAAAAc"] [Sat Feb 21 16:47:41.818555 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/monitoring/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/monitoring/.env"] [unique_id "aZmbXc32sGbo1LuBv-ccQwAAAAg"] [Sat Feb 21 16:47:41.851253 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/portainer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/portainer/.env"] [unique_id "aZmbXZsYisM-Vb7NdNiSnAAAAAE"] [Sat Feb 21 16:47:41.880586 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/redis-commander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/redis-commander/.env"] [unique_id "aZmbXexZ8aVGL1GXrWCjvgAAAF8"] [Sat Feb 21 16:47:41.910641 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/registry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/registry/.env"] [unique_id "aZmbXcaXfeKXosj1URLOogAAAAQ"] [Sat Feb 21 16:47:41.941710 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/simcore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/simcore/.env"] [unique_id "aZmbXW_8bsSUFLS0rAkp3QAAAAI"] [Sat Feb 21 16:47:41.969145 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/traefik/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/services/traefik/.env"] [unique_id "aZmbXdpGmemyPzimpI2QVAAAAAA"] [Sat Feb 21 16:47:42.001554 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sessions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sessions/.env"] [unique_id "aZmbXu2vt59VWfuyQDZQnwAAAAU"] [Sat Feb 21 16:47:42.061390 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/shared/.env"] [unique_id "aZmbXgGCi3q8m6N5kGLUggAAAAY"] [Sat Feb 21 16:47:42.089505 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shibboleth/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/shibboleth/.env"] [unique_id "aZmbXpsYisM-Vb7NdNiSnQAAAAE"] [Sat Feb 21 16:47:42.097721 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbXqZVBfJziZ97elz8XAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 16:47:42.097779 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbXqZVBfJziZ97elz8XAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 16:47:42.117096 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/shop/.env"] [unique_id "aZmbXuxZ8aVGL1GXrWCjvwAAAF8"] [Sat Feb 21 16:47:42.149465 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopware/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/shopware/.env"] [unique_id "aZmbXkgDADwSahU77SdDDgAAABY"] [Sat Feb 21 16:47:42.179879 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Simple_server/.env"] [unique_id "aZmbXm_8bsSUFLS0rAkp3gAAAAI"] [Sat Feb 21 16:47:42.206704 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site-library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/site-library/.env"] [unique_id "aZmbXtpGmemyPzimpI2QVQAAAAA"] [Sat Feb 21 16:47:42.232668 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sitemaps/.env"] [unique_id "aZmbXu2vt59VWfuyQDZQoAAAAAU"] [Sat Feb 21 16:47:42.265609 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sites/.env"] [unique_id "aZmbXs32sGbo1LuBv-ccRQAAAAg"] [Sat Feb 21 16:47:42.295387 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitestatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sitestatic/.env"] [unique_id "aZmbXgGCi3q8m6N5kGLUgwAAAAY"] [Sat Feb 21 16:47:42.321629 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Socketio/.env"] [unique_id "aZmbXqZVBfJziZ97elz8XQAAAAc"] [Sat Feb 21 16:47:42.349317 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /source/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/source/.env"] [unique_id "aZmbXuxZ8aVGL1GXrWCjwAAAAF8"] [Sat Feb 21 16:47:42.378738 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sources/.env"] [unique_id "aZmbXkgDADwSahU77SdDDwAAABY"] [Sat Feb 21 16:47:42.380346 2026] [security2:error] [pid 2110069:tid 2110069] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbXpsYisM-Vb7NdNiSngAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 16:47:42.380405 2026] [security2:error] [pid 2110069:tid 2110069] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbXpsYisM-Vb7NdNiSngAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop4%2Fmq%2F0 [Sat Feb 21 16:47:42.405307 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Sources/API/.env"] [unique_id "aZmbXm_8bsSUFLS0rAkp3wAAAAI"] [Sat Feb 21 16:47:42.436405 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spearmint/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/spearmint/.env"] [unique_id "aZmbXtpGmemyPzimpI2QVgAAAAA"] [Sat Feb 21 16:47:42.464162 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spikes/config-material-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/spikes/config-material-app/.env"] [unique_id "aZmbXu2vt59VWfuyQDZQoQAAAAU"] [Sat Feb 21 16:47:42.493648 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/SpotiApps/.env"] [unique_id "aZmbXs32sGbo1LuBv-ccRgAAAAg"] [Sat Feb 21 16:47:42.523602 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/instancewithdependentsteps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "aZmbXgGCi3q8m6N5kGLUhAAAAAY"] [Sat Feb 21 16:47:42.558154 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptintegrationproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "aZmbXuxZ8aVGL1GXrWCjwQAAAF8"] [Sat Feb 21 16:47:42.616939 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "aZmbXkgDADwSahU77SdDEAAAABY"] [Sat Feb 21 16:47:42.646101 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptvisualizeproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "aZmbXpsYisM-Vb7NdNiSnwAAAAE"] [Sat Feb 21 16:47:42.677635 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/add-auth/express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/add-auth/express/.env"] [unique_id "aZmbXm_8bsSUFLS0rAkp4AAAAAI"] [Sat Feb 21 16:47:42.706892 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/assembly/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/assembly/.env"] [unique_id "aZmbXtpGmemyPzimpI2QVwAAAAA"] [Sat Feb 21 16:47:42.735754 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/character-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/character-service/.env"] [unique_id "aZmbXu2vt59VWfuyQDZQogAAAAU"] [Sat Feb 21 16:47:42.766030 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/client/mobile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/client/mobile/.env"] [unique_id "aZmbXs32sGbo1LuBv-ccRwAAAAg"] [Sat Feb 21 16:47:42.803798 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/core/tests/dotenv-files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "aZmbXgGCi3q8m6N5kGLUhQAAAAY"] [Sat Feb 21 16:47:42.834781 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/gameprovider-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/gameprovider-service/.env"] [unique_id "aZmbXkgDADwSahU77SdDEQAAABY"] [Sat Feb 21 16:47:42.867297 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/main/front-end/.env"] [unique_id "aZmbXqZVBfJziZ97elz8XwAAAAc"] [Sat Feb 21 16:47:42.901072 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/resources/archetype-resources/__rootartifactid__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "aZmbXpsYisM-Vb7NdNiSoAAAAAE"] [Sat Feb 21 16:47:42.938617 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/renderer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/src/renderer/.env"] [unique_id "aZmbXm_8bsSUFLS0rAkp4QAAAAI"] [Sat Feb 21 16:47:42.966069 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/controller/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/srv6_controller/controller/.env"] [unique_id "aZmbXtpGmemyPzimpI2QWAAAAAA"] [Sat Feb 21 16:47:42.999998 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/srv6_controller/examples/.env"] [unique_id "aZmbXu2vt59VWfuyQDZQowAAAAU"] [Sat Feb 21 16:47:43.035550 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/node-manager/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/srv6_controller/node-manager/.env"] [unique_id "aZmbX832sGbo1LuBv-ccSAAAAAg"] [Sat Feb 21 16:47:43.080019 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /st-js-be-2020-movies-two/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/st-js-be-2020-movies-two/.env"] [unique_id "aZmbX0gDADwSahU77SdDEgAAABY"] [Sat Feb 21 16:47:43.145793 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stackato-pkg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/stackato-pkg/.env"] [unique_id "aZmbX-xZ8aVGL1GXrWCjwwAAAF8"] [Sat Feb 21 16:47:43.182442 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/stag/.env"] [unique_id "aZmbX2_8bsSUFLS0rAkp4gAAAAI"] [Sat Feb 21 16:47:43.275182 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/staging/api/.env"] [unique_id "aZmbX832sGbo1LuBv-ccSQAAAAg"] [Sat Feb 21 16:47:43.307504 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/staging/backend/.env"] [unique_id "aZmbXwGCi3q8m6N5kGLUhwAAAAY"] [Sat Feb 21 16:47:43.337830 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/staging/frontend/.env"] [unique_id "aZmbX5sYisM-Vb7NdNiSogAAAAE"] [Sat Feb 21 16:47:43.369165 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-collected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static-collected/.env"] [unique_id "aZmbX-xZ8aVGL1GXrWCjxAAAAF8"] [Sat Feb 21 16:47:43.401809 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static-html/.env"] [unique_id "aZmbX2_8bsSUFLS0rAkp4wAAAAI"] [Sat Feb 21 16:47:43.442785 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static-root/.env"] [unique_id "aZmbX9pGmemyPzimpI2QWgAAAAA"] [Sat Feb 21 16:47:43.470939 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static/.env"] [unique_id "aZmbX-2vt59VWfuyQDZQpQAAAAU"] [Sat Feb 21 16:47:43.896559 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static_prod/.env"] [unique_id "aZmbX9pGmemyPzimpI2QXAAAAAA"] [Sat Feb 21 16:47:43.921831 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static_root/.env"] [unique_id "aZmbX-2vt59VWfuyQDZQpwAAAAU"] [Sat Feb 21 16:47:43.956157 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/static_user/.env"] [unique_id "aZmbX8aXfeKXosj1URLOpwAAAAQ"] [Sat Feb 21 16:47:43.988244 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staticfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/staticfiles/.env"] [unique_id "aZmbX832sGbo1LuBv-ccTAAAAAg"] [Sat Feb 21 16:47:44.017004 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/stats/.env"] [unique_id "aZmbYAGCi3q8m6N5kGLUigAAAAY"] [Sat Feb 21 16:47:44.046747 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/storage/.env"] [unique_id "aZmbYJsYisM-Vb7NdNiSpQAAAAE"] [Sat Feb 21 16:47:44.080541 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/storage/.env.local"] [unique_id "aZmbYOxZ8aVGL1GXrWCjxwAAAF8"] [Sat Feb 21 16:47:44.148283 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /strapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/strapi/.env"] [unique_id "aZmbYNpGmemyPzimpI2QXQAAAAA"] [Sat Feb 21 16:47:44.177337 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /style/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/style/.env"] [unique_id "aZmbYG_8bsSUFLS0rAkp5gAAAAI"] [Sat Feb 21 16:47:44.208775 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /styles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/styles/.env"] [unique_id "aZmbYMaXfeKXosj1URLOqAAAAAQ"] [Sat Feb 21 16:47:44.239440 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stylesheets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/stylesheets/.env"] [unique_id "aZmbYM32sGbo1LuBv-ccTQAAAAg"] [Sat Feb 21 16:47:44.271622 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/swagger/"] [unique_id "aZmbYAGCi3q8m6N5kGLUiwAAAAY"] [Sat Feb 21 16:47:44.271691 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/swagger/"] [unique_id "aZmbYAGCi3q8m6N5kGLUiwAAAAY"] [Sat Feb 21 16:47:44.300173 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/symfony/.env"] [unique_id "aZmbYJsYisM-Vb7NdNiSpgAAAAE"] [Sat Feb 21 16:47:44.331325 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system-config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/system-config/.env"] [unique_id "aZmbYOxZ8aVGL1GXrWCjyAAAAF8"] [Sat Feb 21 16:47:44.362464 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/system/.env"] [unique_id "aZmbYKZVBfJziZ97elz8YgAAAAc"] [Sat Feb 21 16:47:44.446639 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /target/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/target/.env"] [unique_id "aZmbYO2vt59VWfuyQDZQqQAAAAU"] [Sat Feb 21 16:47:44.477639 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr10/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/temanr10/.env"] [unique_id "aZmbYAGCi3q8m6N5kGLUjAAAAAY"] [Sat Feb 21 16:47:44.507121 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr9/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/temanr9/.env"] [unique_id "aZmbYJsYisM-Vb7NdNiSpwAAAAE"] [Sat Feb 21 16:47:44.542276 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:44.574589 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/temp/.env"] [unique_id "aZmbYKZVBfJziZ97elz8YwAAAAc"] [Sat Feb 21 16:47:44.601797 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/template/.env"] [unique_id "aZmbYG_8bsSUFLS0rAkp6AAAAAI"] [Sat Feb 21 16:47:44.632167 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /templates/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/templates/.env"] [unique_id "aZmbYM32sGbo1LuBv-ccTwAAAAg"] [Sat Feb 21 16:47:44.727471 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test-network/.env"] [unique_id "aZmbYJsYisM-Vb7NdNiSqAAAAAE"] [Sat Feb 21 16:47:44.755266 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/addorg3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test-network/addOrg3/.env"] [unique_id "aZmbYOxZ8aVGL1GXrWCjygAAAF8"] [Sat Feb 21 16:47:44.815102 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/aries-js-worker/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "aZmbYG_8bsSUFLS0rAkp6QAAAAI"] [Sat Feb 21 16:47:44.844258 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/adapter-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/adapter-rest/.env"] [unique_id "aZmbYM32sGbo1LuBv-ccUAAAAAg"] [Sat Feb 21 16:47:44.873875 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/agent-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "aZmbYNpGmemyPzimpI2QYAAAAAA"] [Sat Feb 21 16:47:44.901953 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/couchdb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/couchdb/.env"] [unique_id "aZmbYO2vt59VWfuyQDZQqwAAAAU"] [Sat Feb 21 16:47:44.927717 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/demo/.env"] [unique_id "aZmbYOxZ8aVGL1GXrWCjywAAAF8"] [Sat Feb 21 16:47:44.959320 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/openapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "aZmbYEgDADwSahU77SdDFwAAABY"] [Sat Feb 21 16:47:44.987150 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-method-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/did-method-rest/.env"] [unique_id "aZmbYKZVBfJziZ97elz8ZQAAAAc"] [Sat Feb 21 16:47:45.016499 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "aZmbYW_8bsSUFLS0rAkp6gAAAAI"] [Sat Feb 21 16:47:45.044463 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/edv-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/edv-rest/.env"] [unique_id "aZmbYc32sGbo1LuBv-ccUQAAAAg"] [Sat Feb 21 16:47:45.078131 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/openapi-demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/openapi-demo/.env"] [unique_id "aZmbYdpGmemyPzimpI2QYQAAAAA"] [Sat Feb 21 16:47:45.106928 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/sidetree-mock/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "aZmbYe2vt59VWfuyQDZQrAAAAAU"] [Sat Feb 21 16:47:45.136991 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/universalresolver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/universalresolver/.env"] [unique_id "aZmbYexZ8aVGL1GXrWCjzAAAAF8"] [Sat Feb 21 16:47:45.165718 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/vc-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/bdd/fixtures/vc-rest/.env"] [unique_id "aZmbYUgDADwSahU77SdDGAAAABY"] [Sat Feb 21 16:47:45.198062 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/fixtures/.env"] [unique_id "aZmbYQGCi3q8m6N5kGLUjwAAAAY"] [Sat Feb 21 16:47:45.235701 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/fixtures/app_types/node/.env"] [unique_id "aZmbYZsYisM-Vb7NdNiSqgAAAAE"] [Sat Feb 21 16:47:45.268059 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZmbYc32sGbo1LuBv-ccUgAAAAg"] [Sat Feb 21 16:47:45.299004 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/node_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/fixtures/node_path/.env"] [unique_id "aZmbYdpGmemyPzimpI2QYgAAAAA"] [Sat Feb 21 16:47:45.326663 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/integration/env-config/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/test/integration/env-config/app/.env"] [unique_id "aZmbYe2vt59VWfuyQDZQrQAAAAU"] [Sat Feb 21 16:47:45.355023 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.414454 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.445788 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.477478 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.505693 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.533598 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.561671 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.590273 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.621778 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.654558 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.684826 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.714705 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.743870 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.774775 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.804202 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.830878 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.868500 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.895134 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.923339 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.952568 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:45.981949 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:46.012913 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:46.041815 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:46.070425 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:46.099182 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/testfiles/.env"] [unique_id "aZmbYtpGmemyPzimpI2QZgAAAAA"] [Sat Feb 21 16:47:46.126236 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:46.192244 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/testing/.env"] [unique_id "aZmbYkgDADwSahU77SdDHQAAABY"] [Sat Feb 21 16:47:46.226377 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/testing/docker/.env"] [unique_id "aZmbYm_8bsSUFLS0rAkp7AAAAAI"] [Sat Feb 21 16:47:46.252290 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/.env"] [unique_id "aZmbYqZVBfJziZ97elz8agAAAAc"] [Sat Feb 21 16:47:46.282229 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Tests/Application/.env"] [unique_id "aZmbYgGCi3q8m6N5kGLUlAAAAAY"] [Sat Feb 21 16:47:46.313600 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v10.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aZmbYtpGmemyPzimpI2QZwAAAAA"] [Sat Feb 21 16:47:46.342271 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v11.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v11.0/.env"] [unique_id "aZmbYpsYisM-Vb7NdNiSrwAAAAE"] [Sat Feb 21 16:47:46.373186 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v12.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v12.0/.env"] [unique_id "aZmbYuxZ8aVGL1GXrWCj0gAAAF8"] [Sat Feb 21 16:47:46.406526 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v13.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v13.0/.env"] [unique_id "aZmbYkgDADwSahU77SdDHgAAABY"] [Sat Feb 21 16:47:46.438561 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v7.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v7.0/.env"] [unique_id "aZmbYm_8bsSUFLS0rAkp7QAAAAI"] [Sat Feb 21 16:47:46.475015 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v8.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v8.0/.env"] [unique_id "aZmbYgGCi3q8m6N5kGLUlQAAAAY"] [Sat Feb 21 16:47:46.504679 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v9.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "aZmbYtpGmemyPzimpI2QaAAAAAA"] [Sat Feb 21 16:47:46.532735 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/drupal-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/drupal-test/.env"] [unique_id "aZmbYpsYisM-Vb7NdNiSsAAAAAE"] [Sat Feb 21 16:47:46.565838 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/integration/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZmbYs32sGbo1LuBv-ccWAAAAAg"] [Sat Feb 21 16:47:46.566899 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZmbYs32sGbo1LuBv-ccWAAAAAg"] [Sat Feb 21 16:47:46.566946 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZmbYs32sGbo1LuBv-ccWAAAAAg"] [Sat Feb 21 16:47:46.602481 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/todo-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tests/todo-react/.env"] [unique_id "aZmbYuxZ8aVGL1GXrWCj0wAAAF8"] [Sat Feb 21 16:47:46.631275 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testwork_json/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/testwork_json/.env"] [unique_id "aZmbYkgDADwSahU77SdDHwAAABY"] [Sat Feb 21 16:47:46.660187 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/theme/.env"] [unique_id "aZmbYm_8bsSUFLS0rAkp7gAAAAI"] [Sat Feb 21 16:47:46.690003 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/theme_static/.env"] [unique_id "aZmbYgGCi3q8m6N5kGLUlgAAAAY"] [Sat Feb 21 16:47:46.719015 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/thumb/.env"] [unique_id "aZmbYtpGmemyPzimpI2QaQAAAAA"] [Sat Feb 21 16:47:46.749980 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumbs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/thumbs/.env"] [unique_id "aZmbYpsYisM-Vb7NdNiSsQAAAAE"] [Sat Feb 21 16:47:46.786161 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tiedostot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tiedostot/.env"] [unique_id "aZmbYqZVBfJziZ97elz8bAAAAAc"] [Sat Feb 21 16:47:46.818876 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:46.852388 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tmp/.env"] [unique_id "aZmbYkgDADwSahU77SdDIAAAABY"] [Sat Feb 21 16:47:46.882907 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tmp/config/.env"] [unique_id "aZmbYm_8bsSUFLS0rAkp7wAAAAI"] [Sat Feb 21 16:47:46.941160 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:47.002523 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/tools/.env"] [unique_id "aZmbY832sGbo1LuBv-ccWgAAAAg"] [Sat Feb 21 16:47:47.033785 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Travel_form/.env"] [unique_id "aZmbY0gDADwSahU77SdDIQAAABY"] [Sat Feb 21 16:47:47.064666 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ts/prime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ts/prime/.env"] [unique_id "aZmbY2_8bsSUFLS0rAkp8AAAAAI"] [Sat Feb 21 16:47:47.096565 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:47.097597 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/tz.php"] [unique_id "aZmbYwGCi3q8m6N5kGLUmAAAAAY"] [Sat Feb 21 16:47:47.097664 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/tz.php"] [unique_id "aZmbYwGCi3q8m6N5kGLUmAAAAAY"] [Sat Feb 21 16:47:47.125691 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:47.153872 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ubuntu/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ubuntu/.env"] [unique_id "aZmbY-2vt59VWfuyQDZQsgAAAAU"] [Sat Feb 21 16:47:47.184563 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/ui/.env"] [unique_id "aZmbY9pGmemyPzimpI2QawAAAAA"] [Sat Feb 21 16:47:47.213082 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unixtime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/unixtime/.env"] [unique_id "aZmbY832sGbo1LuBv-ccWwAAAAg"] [Sat Feb 21 16:47:47.242242 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unsplash-downloader/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/unsplash-downloader/.env"] [unique_id "aZmbY0gDADwSahU77SdDIgAAABY"] [Sat Feb 21 16:47:47.275953 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:47.303989 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/upfiles/.env"] [unique_id "aZmbYwGCi3q8m6N5kGLUmQAAAAY"] [Sat Feb 21 16:47:47.334407 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upload/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/upload/.env"] [unique_id "aZmbY-xZ8aVGL1GXrWCj1gAAAF8"] [Sat Feb 21 16:47:47.367158 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/uploads/.env"] [unique_id "aZmbY-2vt59VWfuyQDZQswAAAAU"] [Sat Feb 21 16:47:47.399598 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /urlmem-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/urlmem-app/.env"] [unique_id "aZmbY9pGmemyPzimpI2QbAAAAAA"] [Sat Feb 21 16:47:47.427347 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/user/.env.staging"] [unique_id "aZmbY832sGbo1LuBv-ccXAAAAAg"] [Sat Feb 21 16:47:47.481906 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/User_info/.env"] [unique_id "aZmbYwGCi3q8m6N5kGLUmgAAAAY"] [Sat Feb 21 16:47:47.509365 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/v1/.env"] [unique_id "aZmbY-xZ8aVGL1GXrWCj1wAAAF8"] [Sat Feb 21 16:47:47.634068 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/v2/.env"] [unique_id "aZmbY832sGbo1LuBv-ccXQAAAAg"] [Sat Feb 21 16:47:47.662116 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/var/backup/.env"] [unique_id "aZmbY0gDADwSahU77SdDJAAAABY"] [Sat Feb 21 16:47:47.692269 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/.env"] [unique_id "aZmbYwGCi3q8m6N5kGLUmwAAAAY"] [Sat Feb 21 16:47:47.722257 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/gobuffalo/envy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/github.com/gobuffalo/envy/.env"] [unique_id "aZmbY-xZ8aVGL1GXrWCj2AAAAF8"] [Sat Feb 21 16:47:47.752713 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/subosito/gotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/github.com/subosito/gotenv/.env"] [unique_id "aZmbY2_8bsSUFLS0rAkp8wAAAAI"] [Sat Feb 21 16:47:47.844227 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /videos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/videos/.env"] [unique_id "aZmbYwGCi3q8m6N5kGLUnAAAAAY"] [Sat Feb 21 16:47:47.900374 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vm-docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vm-docker-compose/.env"] [unique_id "aZmbY2_8bsSUFLS0rAkp9AAAAAI"] [Sat Feb 21 16:47:47.927933 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vod_installer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vod_installer/.env"] [unique_id "aZmbY9pGmemyPzimpI2QbwAAAAA"] [Sat Feb 21 16:47:47.956728 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue-end/vue-til/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vue-end/vue-til/.env"] [unique_id "aZmbY0gDADwSahU77SdDJgAAABY"] [Sat Feb 21 16:47:47.994507 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vue/.env"] [unique_id "aZmbY-xZ8aVGL1GXrWCj2gAAAF8"] [Sat Feb 21 16:47:48.031440 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/vuecli/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vue/vuecli/.env"] [unique_id "aZmbZM32sGbo1LuBv-ccXwAAAAg"] [Sat Feb 21 16:47:48.079491 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue_crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vue_CRM/.env"] [unique_id "aZmbZG_8bsSUFLS0rAkp9QAAAAI"] [Sat Feb 21 16:47:48.181483 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:48.213589 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web-dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/web-dist/.env"] [unique_id "aZmbZKZVBfJziZ97elz8bwAAAAc"] [Sat Feb 21 16:47:48.246228 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/web.config"] [unique_id "aZmbZOxZ8aVGL1GXrWCj2wAAAF8"] [Sat Feb 21 16:47:48.246895 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/web.config"] [unique_id "aZmbZOxZ8aVGL1GXrWCj2wAAAF8"] [Sat Feb 21 16:47:48.309834 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:48.722936 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/Web/siteMariage/.env"] [unique_id "aZmbZKZVBfJziZ97elz8cAAAAAc"] [Sat Feb 21 16:47:48.824250 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webroot_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/webroot_path/.env"] [unique_id "aZmbZMDKy8LdyL0ZjSmoOQAAAAM"] [Sat Feb 21 16:47:48.857008 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/website/.env"] [unique_id "aZmbZAGCi3q8m6N5kGLUnwAAAAY"] [Sat Feb 21 16:47:48.886787 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /websocket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/websocket/.env"] [unique_id "aZmbZO2vt59VWfuyQDZQtgAAAAU"] [Sat Feb 21 16:47:48.918975 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webstatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/webstatic/.env"] [unique_id "aZmbZG_8bsSUFLS0rAkp9wAAAAI"] [Sat Feb 21 16:47:48.919824 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/webstatic/.env"] [unique_id "aZmbZG_8bsSUFLS0rAkp9wAAAAI"] [Sat Feb 21 16:47:48.919850 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/webstatic/.env"] [unique_id "aZmbZG_8bsSUFLS0rAkp9wAAAAI"] [Sat Feb 21 16:47:48.945349 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/webui/.env"] [unique_id "aZmbZKZVBfJziZ97elz8cQAAAAc"] [Sat Feb 21 16:47:48.986706 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/well-known/.env"] [unique_id "aZmbZOxZ8aVGL1GXrWCj3QAAAF8"] [Sat Feb 21 16:47:49.013635 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /whturk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/whturk/.env"] [unique_id "aZmbZcaXfeKXosj1URLOqgAAAAQ"] [Sat Feb 21 16:47:49.044370 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.2.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/windows/tests/9.2.x/.env"] [unique_id "aZmbZdpGmemyPzimpI2QcgAAAAA"] [Sat Feb 21 16:47:49.073376 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.3.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/windows/tests/9.3.x/.env"] [unique_id "aZmbZcDKy8LdyL0ZjSmoOgAAAAM"] [Sat Feb 21 16:47:49.104596 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wordpress/.env"] [unique_id "aZmbZe2vt59VWfuyQDZQtwAAAAU"] [Sat Feb 21 16:47:49.137147 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /workspace/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/workspace/.env"] [unique_id "aZmbZW_8bsSUFLS0rAkp-AAAAAI"] [Sat Feb 21 16:47:49.170882 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbZQGCi3q8m6N5kGLUoAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop6 [Sat Feb 21 16:47:49.170993 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbZQGCi3q8m6N5kGLUoAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop6 [Sat Feb 21 16:47:49.175614 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-config.old"] [unique_id "aZmbZaZVBfJziZ97elz8cgAAAAc"] [Sat Feb 21 16:47:49.184395 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.old"] [unique_id "aZmbZaZVBfJziZ97elz8cgAAAAc"] [Sat Feb 21 16:47:49.238129 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php-backup"] [unique_id "aZmbZexZ8aVGL1GXrWCj3gAAAF8"] [Sat Feb 21 16:47:49.275021 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php~"] [unique_id "aZmbZcaXfeKXosj1URLOqwAAAAQ"] [Sat Feb 21 16:47:49.305252 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.txt"] [unique_id "aZmbZdpGmemyPzimpI2QcwAAAAA"] [Sat Feb 21 16:47:49.335176 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-content/.env"] [unique_id "aZmbZcDKy8LdyL0ZjSmoOwAAAAM"] [Sat Feb 21 16:47:49.368179 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/debug.log"] [unique_id "aZmbZc32sGbo1LuBv-ccYwAAAAg"] [Sat Feb 21 16:47:49.398775 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:49.427155 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-login/.env"] [unique_id "aZmbZW_8bsSUFLS0rAkp-QAAAAI"] [Sat Feb 21 16:47:49.462210 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:49.492529 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp/.env"] [unique_id "aZmbZaZVBfJziZ97elz8cwAAAAc"] [Sat Feb 21 16:47:49.550120 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www-data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/www-data/.env"] [unique_id "aZmbZdpGmemyPzimpI2QdAAAAAA"] [Sat Feb 21 16:47:49.584926 2026] [proxy_fcgi:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:49.615922 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xx-final/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/xx-final/vue-heroes/.env"] [unique_id "aZmbZc32sGbo1LuBv-ccZAAAAAg"] [Sat Feb 21 16:47:49.679518 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /zmusic-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/zmusic-frontend/.env"] [unique_id "aZmbZQGCi3q8m6N5kGLUogAAAAY"] [Sat Feb 21 16:47:49.707558 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/:443/.env"] [unique_id "aZmbZaZVBfJziZ97elz8dAAAAAc"] [Sat Feb 21 16:47:49.736342 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:80/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/:80/.env"] [unique_id "aZmbZcaXfeKXosj1URLOrQAAAAQ"] [Sat Feb 21 16:47:49.766039 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8080/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/:8080/.env"] [unique_id "aZmbZdpGmemyPzimpI2QdQAAAAA"] [Sat Feb 21 16:47:49.794539 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8081/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/:8081/.env"] [unique_id "aZmbZcDKy8LdyL0ZjSmoPQAAAAM"] [Sat Feb 21 16:47:49.828909 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/:8443/.env"] [unique_id "aZmbZc32sGbo1LuBv-ccZQAAAAg"] [Sat Feb 21 16:47:49.856464 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sendgrid_email/.env"] [unique_id "aZmbZexZ8aVGL1GXrWCj4AAAAF8"] [Sat Feb 21 16:47:49.885639 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.sendgrid"] [unique_id "aZmbZe2vt59VWfuyQDZQugAAAAU"] [Sat Feb 21 16:47:49.920369 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/sendgrid_keys.json"] [unique_id "aZmbZQGCi3q8m6N5kGLUowAAAAY"] [Sat Feb 21 16:47:49.920429 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/sendgrid_keys.json"] [unique_id "aZmbZQGCi3q8m6N5kGLUowAAAAY"] [Sat Feb 21 16:47:51.458839 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php.orig"] [unique_id "aZmbZ8DKy8LdyL0ZjSmoRAAAAAM"] [Sat Feb 21 16:47:51.487691 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:51.553463 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/configs/application.ini"] [unique_id "aZmbZ-2vt59VWfuyQDZQwQAAAAU"] [Sat Feb 21 16:47:52.295868 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/sources/api/.env"] [unique_id "aZmbaKZVBfJziZ97elz8eAAAAAc"] [Sat Feb 21 16:47:52.382523 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/api/.git/config"] [unique_id "aZmbaAGCi3q8m6N5kGLUrAAAAAY"] [Sat Feb 21 16:47:52.656511 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/drupal/coder/.git/info/refs"] [unique_id "aZmbaMDKy8LdyL0ZjSmoSQAAAAM"] [Sat Feb 21 16:47:52.681235 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/drupal/coder/.git/info/exclude"] [unique_id "aZmbaKZVBfJziZ97elz8egAAAAc"] [Sat Feb 21 16:47:52.704130 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/drupal/coder/.git/objects/info"] [unique_id "aZmbaO2vt59VWfuyQDZQxgAAAAU"] [Sat Feb 21 16:47:52.729419 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info/packs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/drupal/coder/.git/objects/info/packs"] [unique_id "aZmbaJsYisM-Vb7NdNiSuwAAAAE"] [Sat Feb 21 16:47:52.756241 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/info.log"] [unique_id "aZmbaOxZ8aVGL1GXrWCj7AAAAF8"] [Sat Feb 21 16:47:52.877771 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZmbaO2vt59VWfuyQDZQxwAAAAU"] [Sat Feb 21 16:47:52.897060 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/phpinfo.bak"] [unique_id "aZmbaMaXfeKXosj1URLOugAAAAQ"] [Sat Feb 21 16:47:53.120475 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:53.228065 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:53.276564 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:53.440367 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-content/.git/config"] [unique_id "aZmbadpGmemyPzimpI2QhAAAAAA"] [Sat Feb 21 16:47:53.462740 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "aZmbaaZVBfJziZ97elz8fgAAAAc"] [Sat Feb 21 16:47:53.487571 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-content/themes/.git/config"] [unique_id "aZmbae2vt59VWfuyQDZQygAAAAU"] [Sat Feb 21 16:47:53.507420 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-content/plugins/.git/config"] [unique_id "aZmbacaXfeKXosj1URLOvQAAAAQ"] [Sat Feb 21 16:47:53.530021 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/db.sql"] [unique_id "aZmbacDKy8LdyL0ZjSmoTQAAAAM"] [Sat Feb 21 16:47:53.556530 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/mysql.sql"] [unique_id "aZmbaexZ8aVGL1GXrWCj8AAAAF8"] [Sat Feb 21 16:47:53.583439 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/dump.sql"] [unique_id "aZmbac32sGbo1LuBv-cccQAAAAg"] [Sat Feb 21 16:47:53.605053 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/uploads/db.sql"] [unique_id "aZmbaUgDADwSahU77SdDOAAAABY"] [Sat Feb 21 16:47:53.628653 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/uploads/mysql.sql"] [unique_id "aZmbadpGmemyPzimpI2QhQAAAAA"] [Sat Feb 21 16:47:53.651705 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backup/db.sql"] [unique_id "aZmbaaZVBfJziZ97elz8fwAAAAc"] [Sat Feb 21 16:47:53.676665 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backups/db.sql"] [unique_id "aZmbaQGCi3q8m6N5kGLUsgAAAAY"] [Sat Feb 21 16:47:53.707046 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/db_backup.sql"] [unique_id "aZmbacaXfeKXosj1URLOvgAAAAQ"] [Sat Feb 21 16:47:53.734788 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZmbacDKy8LdyL0ZjSmoTgAAAAM"] [Sat Feb 21 16:47:53.736998 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZmbacDKy8LdyL0ZjSmoTgAAAAM"] [Sat Feb 21 16:47:53.737062 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZmbacDKy8LdyL0ZjSmoTgAAAAM"] [Sat Feb 21 16:47:53.761066 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backup/db_backup.sql"] [unique_id "aZmbaexZ8aVGL1GXrWCj8QAAAF8"] [Sat Feb 21 16:47:53.782174 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/fullbackup.sql"] [unique_id "aZmbac32sGbo1LuBv-cccgAAAAg"] [Sat Feb 21 16:47:53.805911 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/fullwebsite.sql"] [unique_id "aZmbaUgDADwSahU77SdDOQAAABY"] [Sat Feb 21 16:47:53.834805 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/data.sql"] [unique_id "aZmbadpGmemyPzimpI2QhgAAAAA"] [Sat Feb 21 16:47:53.860751 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backup/data.sql"] [unique_id "aZmbaaZVBfJziZ97elz8gAAAAAc"] [Sat Feb 21 16:47:53.886981 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/uploads/data.sql"] [unique_id "aZmbacaXfeKXosj1URLOvwAAAAQ"] [Sat Feb 21 16:47:53.908333 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backups/data.sql"] [unique_id "aZmbacDKy8LdyL0ZjSmoTwAAAAM"] [Sat Feb 21 16:47:53.926710 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backup/database.sql"] [unique_id "aZmbaexZ8aVGL1GXrWCj8gAAAF8"] [Sat Feb 21 16:47:53.957904 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backups/database.sql"] [unique_id "aZmbae2vt59VWfuyQDZQzAAAAAU"] [Sat Feb 21 16:47:53.982032 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/wordpress.sql"] [unique_id "aZmbac32sGbo1LuBv-cccwAAAAg"] [Sat Feb 21 16:47:54.006327 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backups/wordpress.sql"] [unique_id "aZmbakgDADwSahU77SdDOgAAABY"] [Sat Feb 21 16:47:54.028305 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/dbdump.sql"] [unique_id "aZmbatpGmemyPzimpI2QhwAAAAA"] [Sat Feb 21 16:47:54.051617 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/uploads/dbdump.sql"] [unique_id "aZmbaqZVBfJziZ97elz8gQAAAAc"] [Sat Feb 21 16:47:54.072746 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backups/dbdump.sql"] [unique_id "aZmbasaXfeKXosj1URLOwAAAAAQ"] [Sat Feb 21 16:47:54.095655 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-content/backup/dbdump.sql"] [unique_id "aZmbapsYisM-Vb7NdNiSvgAAAAE"] [Sat Feb 21 16:47:54.122736 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wp-config.bak"] [unique_id "aZmbauxZ8aVGL1GXrWCj8wAAAF8"] [Sat Feb 21 16:47:54.123093 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.bak"] [unique_id "aZmbauxZ8aVGL1GXrWCj8wAAAF8"] [Sat Feb 21 16:47:54.175111 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.php.bak1"] [unique_id "aZmbagGCi3q8m6N5kGLUtAAAAAY"] [Sat Feb 21 16:47:54.685723 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wp-config.bak1"] [unique_id "aZmbatpGmemyPzimpI2QiAAAAAA"] [Sat Feb 21 16:47:55.031718 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/var/debug.log"] [unique_id "aZmbawGCi3q8m6N5kGLUtgAAAAY"] [Sat Feb 21 16:47:55.056406 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/content/debug.log"] [unique_id "aZmba8DKy8LdyL0ZjSmoUQAAAAM"] [Sat Feb 21 16:47:55.083085 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/npm-debug.log"] [unique_id "aZmba9pGmemyPzimpI2QigAAAAA"] [Sat Feb 21 16:47:55.083431 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/npm-debug.log" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /npm-debug.log found within REQUEST_FILENAME: /npm-debug.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/npm-debug.log"] [unique_id "aZmba9pGmemyPzimpI2QigAAAAA"] [Sat Feb 21 16:47:55.109281 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/yarn-debug.log"] [unique_id "aZmba832sGbo1LuBv-ccdgAAAAg"] [Sat Feb 21 16:47:55.133669 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/firebase-debug.log"] [unique_id "aZmba0gDADwSahU77SdDPQAAABY"] [Sat Feb 21 16:47:55.219157 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/debug.zip"] [unique_id "aZmba8DKy8LdyL0ZjSmoUgAAAAM"] [Sat Feb 21 16:47:55.219201 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/debug.zip"] [unique_id "aZmba8DKy8LdyL0ZjSmoUgAAAAM"] [Sat Feb 21 16:47:55.239396 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/debug.sql"] [unique_id "aZmba9pGmemyPzimpI2QiwAAAAA"] [Sat Feb 21 16:47:55.312418 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/mysql_debug.sql"] [unique_id "aZmba-xZ8aVGL1GXrWCj9wAAAF8"] [Sat Feb 21 16:47:55.495675 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:55.664632 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/config.inc"] [unique_id "aZmba0gDADwSahU77SdDQAAAABY"] [Sat Feb 21 16:47:55.827570 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/config/parameters.yml"] [unique_id "aZmba0gDADwSahU77SdDQQAAABY"] [Sat Feb 21 16:47:55.848310 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/composer.json"] [unique_id "aZmba-xZ8aVGL1GXrWCj-gAAAF8"] [Sat Feb 21 16:47:55.912538 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/debug-output.txt"] [unique_id "aZmba6ZVBfJziZ97elz8iAAAAAc"] [Sat Feb 21 16:47:55.912595 2026] [security2:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/debug-output.txt"] [unique_id "aZmba6ZVBfJziZ97elz8iAAAAAc"] [Sat Feb 21 16:47:55.932766 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/php.log"] [unique_id "aZmba832sGbo1LuBv-ccegAAAAg"] [Sat Feb 21 16:47:55.952692 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/build.log"] [unique_id "aZmbawGCi3q8m6N5kGLUuwAAAAY"] [Sat Feb 21 16:47:56.285688 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/service.pwd"] [unique_id "aZmbbO2vt59VWfuyQDZQ1gAAAAU"] [Sat Feb 21 16:47:56.380148 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app/etc/local.xml.bak"] [unique_id "aZmbbG_8bsSUFLS0rAkqBwAAAAI"] [Sat Feb 21 16:47:56.401190 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/database.sql"] [unique_id "aZmbbEgDADwSahU77SdDRAAAABY"] [Sat Feb 21 16:47:56.433778 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/mysql.sql"] [unique_id "aZmbbM32sGbo1LuBv-ccfAAAAAg"] [Sat Feb 21 16:47:56.462223 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/backup.sql"] [unique_id "aZmbbOxZ8aVGL1GXrWCj_QAAAF8"] [Sat Feb 21 16:47:56.487318 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/site.sql"] [unique_id "aZmbbMDKy8LdyL0ZjSmoWAAAAAM"] [Sat Feb 21 16:47:56.509909 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/wordpress.sql"] [unique_id "aZmbbJsYisM-Vb7NdNiSxwAAAAE"] [Sat Feb 21 16:47:56.558047 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:56.582678 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/app_dev.php/_profiler/open"] [unique_id "aZmbbNpGmemyPzimpI2QkgAAAAA"] [Sat Feb 21 16:47:56.583759 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:56.611231 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/storage/oauth-private.key"] [unique_id "aZmbbG_8bsSUFLS0rAkqCAAAAAI"] [Sat Feb 21 16:47:56.633704 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/storage/oauth-public.key"] [unique_id "aZmbbM32sGbo1LuBv-ccfQAAAAg"] [Sat Feb 21 16:47:56.661812 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/storage/logs/stack.log"] [unique_id "aZmbbOxZ8aVGL1GXrWCj_gAAAF8"] [Sat Feb 21 16:47:56.686393 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/storage/debug.log"] [unique_id "aZmbbMDKy8LdyL0ZjSmoWQAAAAM"] [Sat Feb 21 16:47:56.944390 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/resources/views/welcome.blade.php"] [unique_id "aZmbbNpGmemyPzimpI2QlAAAAAA"] [Sat Feb 21 16:47:56.944461 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/resources/views/welcome.blade.php"] [unique_id "aZmbbNpGmemyPzimpI2QlAAAAAA"] [Sat Feb 21 16:47:57.023726 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.043704 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.173175 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/vendor/.env.example"] [unique_id "aZmbbW_8bsSUFLS0rAkqCwAAAAI"] [Sat Feb 21 16:47:57.214491 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.239262 2026] [proxy_fcgi:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.261647 2026] [security2:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/errors.log"] [unique_id "aZmbbUgDADwSahU77SdDSAAAABY"] [Sat Feb 21 16:47:57.285275 2026] [security2:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/config.old"] [unique_id "aZmbbZsYisM-Vb7NdNiSywAAAAE"] [Sat Feb 21 16:47:57.307918 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/export.sql"] [unique_id "aZmbbdpGmemyPzimpI2QlgAAAAA"] [Sat Feb 21 16:47:57.335492 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.359005 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.433580 2026] [proxy_fcgi:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.468309 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.487802 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.513287 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.535729 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:57.731368 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/database_backup.sql"] [unique_id "aZmbbexZ8aVGL1GXrWCkAwAAAF8"] [Sat Feb 21 16:47:57.943737 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/core/config.bak"] [unique_id "aZmbbcaXfeKXosj1URLOywAAAAQ"] [Sat Feb 21 16:47:57.990780 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:58.023463 2026] [security2:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/wordpress/wp-config.php"] [unique_id "aZmbbm_8bsSUFLS0rAkqDwAAAAI"] [Sat Feb 21 16:47:58.076012 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.git/HEAD"] [unique_id "aZmbbs32sGbo1LuBv-ccgQAAAAg"] [Sat Feb 21 16:47:58.100348 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.svn/entries"] [unique_id "aZmbbtpGmemyPzimpI2QmgAAAAA"] [Sat Feb 21 16:47:58.129964 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/hgrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.hg/hgrc"] [unique_id "aZmbbuxZ8aVGL1GXrWCkBQAAAF8"] [Sat Feb 21 16:47:58.314473 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/public.key"] [unique_id "aZmbbuxZ8aVGL1GXrWCkBgAAAF8"] [Sat Feb 21 16:47:58.341606 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/ssl.key"] [unique_id "aZmbbgGCi3q8m6N5kGLUxwAAAAY"] [Sat Feb 21 16:47:58.410974 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/selfsigned.key"] [unique_id "aZmbbs32sGbo1LuBv-ccgwAAAAg"] [Sat Feb 21 16:47:58.433693 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/nginx.conf"] [unique_id "aZmbbtpGmemyPzimpI2QnAAAAAA"] [Sat Feb 21 16:47:58.458547 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/httpd.conf"] [unique_id "aZmbbuxZ8aVGL1GXrWCkBwAAAF8"] [Sat Feb 21 16:47:58.663263 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/settings.ini"] [unique_id "aZmbbuxZ8aVGL1GXrWCkCAAAAF8"] [Sat Feb 21 16:47:58.773315 2026] [security2:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/admin/settings.ini"] [unique_id "aZmbbs32sGbo1LuBv-cchQAAAAg"] [Sat Feb 21 16:47:58.823442 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/admin/db.conf"] [unique_id "aZmbbuxZ8aVGL1GXrWCkCQAAAF8"] [Sat Feb 21 16:47:58.845636 2026] [security2:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/admin/sql.conf"] [unique_id "aZmbbu2vt59VWfuyQDZQ4gAAAAU"] [Sat Feb 21 16:47:58.874293 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/admin/.env.bak"] [unique_id "aZmbbgGCi3q8m6N5kGLUygAAAAY"] [Sat Feb 21 16:47:58.975100 2026] [security2:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/private/secret.key"] [unique_id "aZmbbuxZ8aVGL1GXrWCkCgAAAF8"] [Sat Feb 21 16:47:59.125721 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.well-known/.env"] [unique_id "aZmbb8aXfeKXosj1URLO0QAAAAQ"] [Sat Feb 21 16:47:59.202553 2026] [proxy_fcgi:error] [pid 2106359:tid 2106359] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.227959 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.255349 2026] [proxy_fcgi:error] [pid 2099532:tid 2099532] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.279986 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/configuration.bak"] [unique_id "aZmbb9pGmemyPzimpI2QoAAAAAA"] [Sat Feb 21 16:47:59.302070 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.325940 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.346958 2026] [proxy_fcgi:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.372346 2026] [proxy_fcgi:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.482516 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.639701 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:47:59.698363 2026] [proxy_fcgi:error] [pid 2094641:tid 2094641] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.760587 2026] [proxy_fcgi:error] [pid 2107796:tid 2107796] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.786182 2026] [proxy_fcgi:error] [pid 2110069:tid 2110069] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.818782 2026] [proxy_fcgi:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.840070 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:47:59.986630 2026] [security2:error] [pid 2110754:tid 2110754] [client 185.177.72.30:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "brightway.com.pk"] [uri "/.env.sh"] [unique_id "aZmbb8DKy8LdyL0ZjSmoZgAAAAM"] [Sat Feb 21 16:48:00.277435 2026] [security2:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/install.sql"] [unique_id "aZmbcAGCi3q8m6N5kGLU0QAAAAY"] [Sat Feb 21 16:48:00.300490 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/update.sql"] [unique_id "aZmbcNpGmemyPzimpI2QpQAAAAA"] [Sat Feb 21 16:48:00.326969 2026] [security2:error] [pid 2107783:tid 2107783] [client 185.177.72.30:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "brightway.com.pk"] [uri "/delete.sql"] [unique_id "aZmbcMaXfeKXosj1URLO1gAAAAQ"] [Sat Feb 21 16:48:00.410959 2026] [proxy_fcgi:error] [pid 2106943:tid 2106943] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:48:00.444996 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 185.177.72.30:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:48:13.259472 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbfcaXfeKXosj1URLO3gAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:48:13.259554 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbfcaXfeKXosj1URLO3gAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:48:19.274651 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbg2_8bsSUFLS0rAkqIQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:48:19.274813 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbg2_8bsSUFLS0rAkqIQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 16:48:46.221412 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbnqZVBfJziZ97elz8rAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5 [Sat Feb 21 16:48:46.221519 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbnqZVBfJziZ97elz8rAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5 [Sat Feb 21 16:48:51.768308 2026] [security2:error] [pid 2110069:tid 2110069] [client 52.167.144.175:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZmbo5sYisM-Vb7NdNiS8gAAAAE"] [Sat Feb 21 16:48:52.713663 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:48:57.703037 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:49:01.996308 2026] [security2:error] [pid 2110069:tid 2110069] [client 52.167.144.138:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZmbrZsYisM-Vb7NdNiS9wAAAAE"] [Sat Feb 21 16:49:27.279841 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbx6ZVBfJziZ97elz8wwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 16:49:27.279940 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmbx6ZVBfJziZ97elz8wwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0 [Sat Feb 21 16:49:37.281744 2026] [security2:error] [pid 2110069:tid 2110069] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb0ZsYisM-Vb7NdNiTCgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:49:37.281852 2026] [security2:error] [pid 2110069:tid 2110069] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb0ZsYisM-Vb7NdNiTCgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:49:38.268587 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb0uxZ8aVGL1GXrWCkQwAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 16:49:38.268688 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb0uxZ8aVGL1GXrWCkQwAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 16:49:57.776698 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:50:04.461885 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb7MaXfeKXosj1URLPFQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq [Sat Feb 21 16:50:04.461980 2026] [security2:error] [pid 2107783:tid 2107783] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb7MaXfeKXosj1URLPFQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq [Sat Feb 21 16:50:11.824241 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb8-xZ8aVGL1GXrWCkWQAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 16:50:11.824318 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmb8-xZ8aVGL1GXrWCkWQAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 16:50:18.781035 2026] [security2:error] [pid 2107783:tid 2107783] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmb-caXfeKXosj1URLPHgAAAAQ"] [Sat Feb 21 16:50:18.781123 2026] [security2:error] [pid 2107783:tid 2107783] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmb-caXfeKXosj1URLPHgAAAAQ"] [Sat Feb 21 16:50:30.747868 2026] [security2:error] [pid 2110754:tid 2110754] [client 199.195.249.231:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-global": Permission denied [hostname "ahk.com.pk"] [uri "/wp-login.php"] [unique_id "aZmcBsDKy8LdyL0ZjSmotgAAAAM"] [Sat Feb 21 16:50:30.747942 2026] [security2:error] [pid 2110754:tid 2110754] [client 199.195.249.231:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-ip": Permission denied [hostname "ahk.com.pk"] [uri "/wp-login.php"] [unique_id "aZmcBsDKy8LdyL0ZjSmotgAAAAM"] [Sat Feb 21 16:50:43.900178 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcE0gDADwSahU77SdDrAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 16:50:43.900274 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcE0gDADwSahU77SdDrAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 16:50:47.836143 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/x.php [Sat Feb 21 16:50:48.433706 2026] [access_compat:error] [pid 2106943:tid 2106943] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/chosen.php [Sat Feb 21 16:50:57.994381 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:51:00.265509 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcJKZVBfJziZ97elz8-AAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem [Sat Feb 21 16:51:00.265608 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcJKZVBfJziZ97elz8-AAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem [Sat Feb 21 16:51:00.811274 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/okxh.php [Sat Feb 21 16:51:01.429465 2026] [access_compat:error] [pid 2106943:tid 2106943] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/shell20211028.php [Sat Feb 21 16:51:02.050551 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/zqhfn.php [Sat Feb 21 16:51:03.358869 2026] [security2:error] [pid 2111611:tid 2111611] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmcJqvyvghKH4muuU_6vwAAAAg"] [Sat Feb 21 16:51:03.358962 2026] [security2:error] [pid 2111611:tid 2111611] [client 194.5.82.54:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmcJqvyvghKH4muuU_6vwAAAAg"] [Sat Feb 21 16:51:06.169179 2026] [security2:error] [pid 2099532:tid 2099532] [client 14.184.23.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-global": Permission denied [hostname "www.edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmcKW_8bsSUFLS0rAkqfQAAAAI"] [Sat Feb 21 16:51:06.169288 2026] [security2:error] [pid 2099532:tid 2099532] [client 14.184.23.79:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/edmtech-ip": Permission denied [hostname "www.edm-technology.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmcKW_8bsSUFLS0rAkqfQAAAAI"] [Sat Feb 21 16:51:10.672357 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcLkgDADwSahU77SdDvQAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:51:10.672439 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcLkgDADwSahU77SdDvQAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:51:13.183054 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/k.php [Sat Feb 21 16:51:24.030068 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/403.php [Sat Feb 21 16:51:24.602328 2026] [access_compat:error] [pid 2110754:tid 2110754] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/fimai.php [Sat Feb 21 16:51:25.174973 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/maul.php [Sat Feb 21 16:51:25.763242 2026] [access_compat:error] [pid 2110754:tid 2110754] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/elp.php [Sat Feb 21 16:51:26.330602 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/tt.php [Sat Feb 21 16:51:46.376507 2026] [security2:error] [pid 2099532:tid 2099532] [client 194.5.82.54:0] ModSecurity: Warning. Matched phrase "gzdecode" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: gzdecode found within REQUEST_FILENAME: /wp-includes/simplepie/gzdecode.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "bright-baby.net"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aZmcUm_8bsSUFLS0rAkqlgAAAAI"] [Sat Feb 21 16:51:47.562128 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/an.php [Sat Feb 21 16:51:48.139031 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/orouu.php [Sat Feb 21 16:51:48.534342 2026] [security2:error] [pid 2106943:tid 2106943] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "testthree.onebox.pk"] [uri "/cgi-sys/ea-php83/content.php"] [unique_id "aZmcVKZVBfJziZ97elz9GQAAAAc"] [Sat Feb 21 16:51:48.534419 2026] [security2:error] [pid 2106943:tid 2106943] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "testthree.onebox.pk"] [uri "/cgi-sys/ea-php83/content.php"] [unique_id "aZmcVKZVBfJziZ97elz9GQAAAAc"] [Sat Feb 21 16:51:48.628401 2026] [security2:error] [pid 2111611:tid 2111611] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcVKvyvghKH4muuU_62wAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem [Sat Feb 21 16:51:48.628487 2026] [security2:error] [pid 2111611:tid 2111611] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcVKvyvghKH4muuU_62wAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fsubsystem [Sat Feb 21 16:51:48.714664 2026] [access_compat:error] [pid 2107783:tid 2107783] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/config.php [Sat Feb 21 16:51:49.307148 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/z.php [Sat Feb 21 16:51:50.099883 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/55b76.php [Sat Feb 21 16:51:52.561588 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcWAGCi3q8m6N5kGLVTgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:51:52.561709 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcWAGCi3q8m6N5kGLVTgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4 [Sat Feb 21 16:52:00.102875 2026] [access_compat:error] [pid 2110754:tid 2110754] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/kalso.php [Sat Feb 21 16:52:01.036690 2026] [access_compat:error] [pid 2106943:tid 2106943] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/web.php [Sat Feb 21 16:52:01.624730 2026] [access_compat:error] [pid 2111108:tid 2111108] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/5b9ac.php [Sat Feb 21 16:52:02.264651 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/system.php [Sat Feb 21 16:52:14.361366 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/byp.php [Sat Feb 21 16:52:37.386490 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:52:58.920674 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/domains.php [Sat Feb 21 16:52:59.719039 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/clss.php [Sat Feb 21 16:53:00.308120 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/autoload_classmap.php [Sat Feb 21 16:53:00.866763 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/byp.php [Sat Feb 21 16:53:10.111298 2026] [security2:error] [pid 2111611:tid 2111611] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcpqvyvghKH4muuU_7BQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 16:53:10.111355 2026] [security2:error] [pid 2111611:tid 2111611] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcpqvyvghKH4muuU_7BQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 16:53:11.652099 2026] [access_compat:error] [pid 2110754:tid 2110754] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/zc-104.php [Sat Feb 21 16:53:22.544761 2026] [access_compat:error] [pid 2110754:tid 2110754] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/6kDPjgFTmvS.php [Sat Feb 21 16:53:23.106280 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/vanda.php [Sat Feb 21 16:53:26.325609 2026] [security2:error] [pid 2094465:tid 2094465] [client 34.41.205.200:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mrxcoin.io"] [uri "/.env"] [unique_id "aZmctkgDADwSahU77SdEDAAAABY"] [Sat Feb 21 16:53:34.651569 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/install.php [Sat Feb 21 16:53:45.208865 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:53:47.212277 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcy0gDADwSahU77SdEGAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:53:47.212353 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmcy0gDADwSahU77SdEGAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:53:52.359533 2026] [proxy_fcgi:error] [pid 2110754:tid 2110754] [client 20.100.191.215:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:53:52.387745 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 20.100.191.215:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:53:52.419694 2026] [proxy_fcgi:error] [pid 2111108:tid 2111108] [client 20.100.191.215:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 16:53:52.420160 2026] [security2:error] [pid 2111108:tid 2111108] [client 20.100.191.215:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/pebitech-global": Permission denied [hostname "pebi.tech"] [uri "/admin.php"] [unique_id "aZmc0LssVqVHqiCWeTpL6wAAAAU"] [Sat Feb 21 16:53:52.420185 2026] [security2:error] [pid 2111108:tid 2111108] [client 20.100.191.215:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/pebitech-ip": Permission denied [hostname "pebi.tech"] [uri "/admin.php"] [unique_id "aZmc0LssVqVHqiCWeTpL6wAAAAU"] [Sat Feb 21 16:54:09.041582 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:54:16.061512 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/gdn.php [Sat Feb 21 16:54:17.255979 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/cache.php [Sat Feb 21 16:54:28.090009 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/asd.php [Sat Feb 21 16:54:28.753322 2026] [access_compat:error] [pid 2107783:tid 2107783] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/favicon.php [Sat Feb 21 16:54:29.360351 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/file.php [Sat Feb 21 16:54:29.910760 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/rzki.php [Sat Feb 21 16:54:30.730013 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/buy.php [Sat Feb 21 16:54:31.269960 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/install.php [Sat Feb 21 16:54:31.803594 2026] [access_compat:error] [pid 2107783:tid 2107783] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/inputs.php [Sat Feb 21 16:54:37.783757 2026] [cgi:error] [pid 2094465:tid 2094465] [client 194.5.82.54:0] AH02812: stderr from /home/brightbaby/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 16:54:42.336832 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdAqZVBfJziZ97elz9eQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 16:54:42.336929 2026] [security2:error] [pid 2106943:tid 2106943] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdAqZVBfJziZ97elz9eQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 16:54:53.010591 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/ws.php [Sat Feb 21 16:54:53.627773 2026] [access_compat:error] [pid 2106943:tid 2106943] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/44.php [Sat Feb 21 16:55:03.915907 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/404.php [Sat Feb 21 16:55:38.141008 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:55:45.571557 2026] [security2:error] [pid 2094641:tid 2094641] [client 195.250.31.127:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.groopview.com"] [uri "/.env"] [unique_id "aZmdQexZ8aVGL1GXrWClFwAAAF8"] [Sat Feb 21 16:55:45.888667 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdQW_8bsSUFLS0rAkrJgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:55:45.888769 2026] [security2:error] [pid 2099532:tid 2099532] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdQW_8bsSUFLS0rAkrJgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:55:47.337544 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/wp-config-sample.php [Sat Feb 21 16:55:47.470819 2026] [security2:error] [pid 2112979:tid 2112979] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdQyQS6FXrbdr5x_oOxAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:55:47.471147 2026] [security2:error] [pid 2112979:tid 2112979] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdQyQS6FXrbdr5x_oOxAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:55:47.888560 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:55:47.901497 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/rip.php [Sat Feb 21 16:55:53.668651 2026] [security2:error] [pid 2114646:tid 2114646] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdSbCHA_skcnNJWb_ckAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2 [Sat Feb 21 16:55:53.668780 2026] [security2:error] [pid 2114646:tid 2114646] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdSbCHA_skcnNJWb_ckAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop2 [Sat Feb 21 16:55:54.242182 2026] [security2:error] [pid 2114505:tid 2114505] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/class-walker-page-dropdown.php"] [unique_id "aZmdSvlL1oUhZ4GbCuRAowAAAAM"] [Sat Feb 21 16:55:54.242245 2026] [security2:error] [pid 2114505:tid 2114505] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/class-walker-page-dropdown.php"] [unique_id "aZmdSvlL1oUhZ4GbCuRAowAAAAM"] [Sat Feb 21 16:55:54.974924 2026] [security2:error] [pid 2094465:tid 2094465] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/class-wp-ajax-response.php"] [unique_id "aZmdSkgDADwSahU77SdEawAAABY"] [Sat Feb 21 16:55:54.974988 2026] [security2:error] [pid 2094465:tid 2094465] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/class-wp-ajax-response.php"] [unique_id "aZmdSkgDADwSahU77SdEawAAABY"] [Sat Feb 21 16:56:01.113716 2026] [security2:error] [pid 2111611:tid 2111611] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdUavyvghKH4muuU_7cgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:56:01.113812 2026] [security2:error] [pid 2111611:tid 2111611] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdUavyvghKH4muuU_7cgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 16:56:20.196213 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 16:56:22.608627 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdZgGCi3q8m6N5kGLV7QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fsubsystem%2Floop3 [Sat Feb 21 16:56:22.608707 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdZgGCi3q8m6N5kGLV7QAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fsubsystem%2Floop3 [Sat Feb 21 16:56:24.541248 2026] [security2:error] [pid 2094641:tid 2094641] [client 72.57.65.141:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-global": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmdZ-xZ8aVGL1GXrWClOgAAAF8"], referer: https://rawaealbatin.com/ [Sat Feb 21 16:56:24.541340 2026] [security2:error] [pid 2094641:tid 2094641] [client 72.57.65.141:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rawaealbatin-ip": Permission denied [hostname "rawaealbatin.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmdZ-xZ8aVGL1GXrWClOgAAAF8"], referer: https://rawaealbatin.com/ [Sat Feb 21 16:56:25.330613 2026] [security2:error] [pid 2112979:tid 2112979] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/fonts.php"] [unique_id "aZmdaSQS6FXrbdr5x_oO5AAAAAE"] [Sat Feb 21 16:56:25.330700 2026] [security2:error] [pid 2112979:tid 2112979] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/fonts.php"] [unique_id "aZmdaSQS6FXrbdr5x_oO5AAAAAE"] [Sat Feb 21 16:56:29.309964 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/404.php [Sat Feb 21 16:56:29.856666 2026] [access_compat:error] [pid 2111108:tid 2111108] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/wp-blog.php [Sat Feb 21 16:56:30.427599 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/info.php [Sat Feb 21 16:56:41.125151 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/rip.php [Sat Feb 21 16:56:41.708485 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/h.php [Sat Feb 21 16:56:42.298299 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/56c53.php [Sat Feb 21 16:56:46.577310 2026] [security2:error] [pid 2112979:tid 2112979] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/customize/class-wp-customize-header-image-control.php"] [unique_id "aZmdfiQS6FXrbdr5x_oO-gAAAAE"] [Sat Feb 21 16:56:46.577362 2026] [security2:error] [pid 2112979:tid 2112979] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/customize/class-wp-customize-header-image-control.php"] [unique_id "aZmdfiQS6FXrbdr5x_oO-gAAAAE"] [Sat Feb 21 16:56:52.610223 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/i.php [Sat Feb 21 16:56:53.173769 2026] [access_compat:error] [pid 2111108:tid 2111108] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/xsas.php [Sat Feb 21 16:56:53.696668 2026] [access_compat:error] [pid 2107783:tid 2107783] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/varb.php [Sat Feb 21 16:56:56.615496 2026] [security2:error] [pid 2107783:tid 2107783] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "aZmdiMaXfeKXosj1URLQKwAAAAQ"] [Sat Feb 21 16:56:56.615571 2026] [security2:error] [pid 2107783:tid 2107783] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "aZmdiMaXfeKXosj1URLQKwAAAAQ"] [Sat Feb 21 16:57:04.080330 2026] [access_compat:error] [pid 2111611:tid 2111611] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/xxzdc.php [Sat Feb 21 16:57:04.671203 2026] [access_compat:error] [pid 2111108:tid 2111108] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/gdn.php [Sat Feb 21 16:57:05.251770 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/elp.php [Sat Feb 21 16:57:05.792901 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/144.php [Sat Feb 21 16:57:16.209436 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/wp-conf.php [Sat Feb 21 16:57:19.546689 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdn9pGmemyPzimpI2SCAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:57:19.546766 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdn9pGmemyPzimpI2SCAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 16:57:25.207921 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:57:27.194072 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/lm15.php [Sat Feb 21 16:57:27.737590 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/inputs.php [Sat Feb 21 16:57:49.932335 2026] [access_compat:error] [pid 2107783:tid 2107783] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/d12.php [Sat Feb 21 16:57:50.501956 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/test.php [Sat Feb 21 16:57:51.114589 2026] [access_compat:error] [pid 2111108:tid 2111108] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/hehe.php [Sat Feb 21 16:57:56.019581 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdw9pGmemyPzimpI2SJQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fsubsystem%2Floop0%2Fbdi [Sat Feb 21 16:57:56.019643 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmdw9pGmemyPzimpI2SJQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fsubsystem%2Floop0%2Fbdi [Sat Feb 21 16:58:01.944303 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/themes.php [Sat Feb 21 16:58:02.513152 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/bo.php [Sat Feb 21 16:58:03.128493 2026] [access_compat:error] [pid 2107783:tid 2107783] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/a5e0a.php [Sat Feb 21 16:58:03.738986 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 52.172.248.2:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/z.php [Sat Feb 21 16:58:27.923345 2026] [security2:error] [pid 2105506:tid 2105506] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmd4wGCi3q8m6N5kGLWTgAAAAY"] [Sat Feb 21 16:58:27.923405 2026] [security2:error] [pid 2105506:tid 2105506] [client 194.5.82.71:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZmd4wGCi3q8m6N5kGLWTgAAAAY"] [Sat Feb 21 16:58:34.586408 2026] [access_compat:error] [pid 2099532:tid 2099532] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 16:59:13.590325 2026] [security2:error] [pid 2105506:tid 2105506] [client 51.75.151.149:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /wp-content/plugins/cidaas-pro-master/composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "science-on-stage.sk"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZmeEQGCi3q8m6N5kGLWZgAAAAY"] [Sat Feb 21 16:59:24.685516 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeHPlL1oUhZ4GbCuRBPAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:59:24.685627 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeHPlL1oUhZ4GbCuRBPAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 16:59:30.085974 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086104 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086162 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086218 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086271 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086325 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086376 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086426 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086478 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086529 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086580 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086662 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086735 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.086788 2026] [negotiation:error] [pid 2105506:tid 2105506] (13)Permission denied: [client 194.5.82.71:0] AH00686: cannot read directory for multi: /usr/local/cpanel/cgi-sys/ [Sat Feb 21 16:59:30.092291 2026] [cgi:error] [pid 2105506:tid 2105506] [client 194.5.82.71:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/index.html: (13)Permission denied: exec of '/usr/local/cpanel/cgi-sys/index.html' failed [Sat Feb 21 16:59:30.095063 2026] [cgi:error] [pid 2105506:tid 2105506] [client 194.5.82.71:0] End of script output before headers: index.html [Sat Feb 21 16:59:30.226435 2026] [security2:error] [pid 2111611:tid 2111611] [client 114.119.153.169:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmeHavyvghKH4muuU_8BQAAAAg"], referer: https://asalinnovations.com/category/twoo-recenze-peihlg%D1%9Esit-se-939/ [Sat Feb 21 16:59:30.226525 2026] [security2:error] [pid 2111611:tid 2111611] [client 114.119.153.169:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmeHavyvghKH4muuU_8BQAAAAg"], referer: https://asalinnovations.com/category/twoo-recenze-peihlg%D1%9Esit-se-939/ [Sat Feb 21 16:59:45.060861 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeMAGCi3q8m6N5kGLWdwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:59:45.061014 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeMAGCi3q8m6N5kGLWdwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 16:59:49.740545 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:00:17.734930 2026] [security2:error] [pid 2105506:tid 2105506] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "alliancechem-eng.com"] [uri "/.env"] [unique_id "aZmeUQGCi3q8m6N5kGLWkAAAAAY"] [Sat Feb 21 17:00:18.286133 2026] [security2:error] [pid 2111108:tid 2111108] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "alliancechem-eng.com"] [uri "/.git/config"] [unique_id "aZmeUrssVqVHqiCWeTpNAQAAAAU"] [Sat Feb 21 17:00:18.696704 2026] [security2:error] [pid 2099532:tid 2099532] [client 170.64.218.247:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "alliancechem-eng.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZmeUm_8bsSUFLS0rAkr5wAAAAI"] [Sat Feb 21 17:00:19.429127 2026] [security2:error] [pid 2095811:tid 2095811] [client 170.64.218.247:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "368"] [id "920340"] [rev "3"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [hostname "alliancechem-eng.com"] [uri "/"] [unique_id "aZmeU9pGmemyPzimpI2SgwAAAAA"] [Sat Feb 21 17:00:21.459390 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:00:23.401572 2026] [security2:error] [pid 2094465:tid 2094465] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../css/gm.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php"] [unique_id "aZmeV0gDADwSahU77SdFKAAAABY"] [Sat Feb 21 17:00:23.401726 2026] [security2:error] [pid 2094465:tid 2094465] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxaction=getids&cfg=../css/gm.css"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php"] [unique_id "aZmeV0gDADwSahU77SdFKAAAABY"] [Sat Feb 21 17:00:25.329365 2026] [security2:error] [pid 2111611:tid 2111611] [client 170.64.218.247:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmeWavyvghKH4muuU_8LgAAAAg"] [Sat Feb 21 17:00:25.329454 2026] [security2:error] [pid 2111611:tid 2111611] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmeWavyvghKH4muuU_8LgAAAAg"] [Sat Feb 21 17:00:25.329528 2026] [security2:error] [pid 2111611:tid 2111611] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/gwolle-gb/frontend/captcha/ajaxresponse.php"] [unique_id "aZmeWavyvghKH4muuU_8LgAAAAg"] [Sat Feb 21 17:00:25.381471 2026] [security2:error] [pid 2095811:tid 2095811] [client 170.64.218.247:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmeWdpGmemyPzimpI2ShgAAAAA"] [Sat Feb 21 17:00:25.381560 2026] [security2:error] [pid 2095811:tid 2095811] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmeWdpGmemyPzimpI2ShgAAAAA"] [Sat Feb 21 17:00:25.381619 2026] [security2:error] [pid 2095811:tid 2095811] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/canto/includes/lib/sizes.php?abspath=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/canto/includes/lib/sizes.php"] [unique_id "aZmeWdpGmemyPzimpI2ShgAAAAA"] [Sat Feb 21 17:00:25.389230 2026] [security2:error] [pid 2112979:tid 2112979] [client 170.64.218.247:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmeWSQS6FXrbdr5x_oPhgAAAAE"] [Sat Feb 21 17:00:25.389342 2026] [security2:error] [pid 2112979:tid 2112979] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmeWSQS6FXrbdr5x_oPhgAAAAE"] [Sat Feb 21 17:00:25.389419 2026] [security2:error] [pid 2112979:tid 2112979] [client 170.64.218.247:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /wp-content/plugins/lws-affiliation/view/admin/preview_widget.php?path=../../../../../"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "alliancechem-eng.com"] [uri "/wp-content/plugins/lws-affiliation/view/admin/preview_widget.php"] [unique_id "aZmeWSQS6FXrbdr5x_oPhgAAAAE"] [Sat Feb 21 17:00:25.701599 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeWflL1oUhZ4GbCuRBaAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 17:00:25.701688 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeWflL1oUhZ4GbCuRBaAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 17:00:27.477378 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:00:28.478827 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:00:29.480277 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:00:31.482562 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:00:35.298965 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeY9N8QiXldctDSzEX2QAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:00:35.299071 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeY9N8QiXldctDSzEX2QAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:00:41.492818 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:01:05.201946 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:01:06.670738 2026] [security2:error] [pid 2117381:tid 2117381] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeggxJAo-_8N_PHqOzewAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:01:06.670865 2026] [security2:error] [pid 2117381:tid 2117381] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmeggxJAo-_8N_PHqOzewAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:01:17.587134 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmejT1ptPcqn_sBRBekJgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 17:01:17.587194 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmejT1ptPcqn_sBRBekJgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 17:01:22.512923 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmekkgDADwSahU77SdFQgAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:01:22.513019 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmekkgDADwSahU77SdFQgAAABY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:01:30.720705 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmemuxZ8aVGL1GXrWCl9QAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 17:01:30.720770 2026] [security2:error] [pid 2094641:tid 2094641] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmemuxZ8aVGL1GXrWCl9QAAAF8"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 17:01:34.412539 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmenvlL1oUhZ4GbCuRBiQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 17:01:34.412697 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmenvlL1oUhZ4GbCuRBiQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 17:01:51.574637 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:01:51.963193 2026] [security2:error] [pid 2117316:tid 2117316] [client 35.158.130.174:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/wp-config.php-backup"] [unique_id "aZmerz1ptPcqn_sBRBekNAAAAAc"] [Sat Feb 21 17:01:52.296448 2026] [security2:error] [pid 2112979:tid 2112979] [client 35.158.130.174:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/sapi/debug/default/view"] [unique_id "aZmesCQS6FXrbdr5x_oPsAAAAAE"] [Sat Feb 21 17:01:52.296526 2026] [security2:error] [pid 2112979:tid 2112979] [client 35.158.130.174:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/sapi/debug/default/view"] [unique_id "aZmesCQS6FXrbdr5x_oPsAAAAAE"] [Sat Feb 21 17:01:54.998427 2026] [security2:error] [pid 2117880:tid 2117880] [client 35.158.130.174:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmeslrljTgaSsSbAKrgQAAAAAI"] [Sat Feb 21 17:01:54.998517 2026] [security2:error] [pid 2117880:tid 2117880] [client 35.158.130.174:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmeslrljTgaSsSbAKrgQAAAAAI"] [Sat Feb 21 17:01:56.401396 2026] [security2:error] [pid 2117331:tid 2117331] [client 35.158.130.174:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "haq.rentacarkarachi.com"] [uri "/wp-config.php-backup"] [unique_id "aZmetNN8QiXldctDSzEX_AAAAAo"] [Sat Feb 21 17:02:11.392310 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmew0gDADwSahU77SdFWgAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 17:02:11.392366 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmew0gDADwSahU77SdFWgAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 17:02:17.958381 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:02:43.524474 2026] [security2:error] [pid 2094641:tid 2094641] [client 172.94.9.253:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.git/config"] [unique_id "aZme4-xZ8aVGL1GXrWCmFgAAAF8"] [Sat Feb 21 17:02:44.668871 2026] [security2:error] [pid 2094465:tid 2094465] [client 172.94.9.253:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/admin/.git/config"] [unique_id "aZme5EgDADwSahU77SdFaAAAABY"] [Sat Feb 21 17:02:45.683067 2026] [security2:error] [pid 2105506:tid 2105506] [client 172.94.9.253:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /private/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/private/.git/config"] [unique_id "aZme5QGCi3q8m6N5kGLW1wAAAAY"] [Sat Feb 21 17:02:46.746852 2026] [security2:error] [pid 2117880:tid 2117880] [client 172.94.9.253:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.git/config"] [unique_id "aZme5lrljTgaSsSbAKrgWAAAAAI"] [Sat Feb 21 17:02:47.749504 2026] [security2:error] [pid 2112979:tid 2112979] [client 172.94.9.253:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /admin/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/admin/.git/config"] [unique_id "aZme5yQS6FXrbdr5x_oPxwAAAAE"] [Sat Feb 21 17:02:48.774722 2026] [security2:error] [pid 2094641:tid 2094641] [client 172.94.9.253:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /private/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/private/.git/config"] [unique_id "aZme6OxZ8aVGL1GXrWCmGQAAAF8"] [Sat Feb 21 17:03:00.237366 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:01.656208 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:03.068725 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:04.356817 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:05.627361 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:06.914037 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:03:08.300685 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:09.688708 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:10.891491 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:12.076860 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:13.405148 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:13.643985 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfAdN8QiXldctDSzEYJgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:03:13.644064 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfAdN8QiXldctDSzEYJgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:03:14.785430 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:03:15.771616 2026] [security2:error] [pid 2112979:tid 2112979] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfAyQS6FXrbdr5x_oP0gAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:03:15.771733 2026] [security2:error] [pid 2112979:tid 2112979] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfAyQS6FXrbdr5x_oP0gAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:03:16.187982 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:17.422911 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:18.574995 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:03:19.606239 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:20.759049 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:22.239250 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:23.676190 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:03:24.935839 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:26.097767 2026] [access_compat:error] [pid 2094641:tid 2094641] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:27.212305 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:28.707933 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:29.988791 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:31.519401 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:03:32.683076 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:03:33.017193 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:34.495631 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:35.874566 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:37.368921 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:38.558182 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:39.768843 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:03:41.009573 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:42.378613 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:42.471962 2026] [security2:error] [pid 2117880:tid 2117880] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfHlrljTgaSsSbAKrgfQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:03:42.472043 2026] [security2:error] [pid 2117880:tid 2117880] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfHlrljTgaSsSbAKrgfQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:03:43.511706 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:44.867430 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:46.243290 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:03:47.479670 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:48.845201 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:50.096868 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:51.446022 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:52.668333 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:03:55.614865 2026] [security2:error] [pid 2117330:tid 2117330] [client 47.82.11.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmfKk2tuYqm1A4reVSIVQAAAAk"], referer: http://rentacarkarachi.com/ [Sat Feb 21 17:03:55.614930 2026] [security2:error] [pid 2117330:tid 2117330] [client 47.82.11.13:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmfKk2tuYqm1A4reVSIVQAAAAk"], referer: http://rentacarkarachi.com/ [Sat Feb 21 17:03:58.353270 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:03:59.758088 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:01.086401 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:02.848579 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:03.280420 2026] [core:error] [pid 2117330:tid 2117330] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.280479 2026] [core:error] [pid 2117330:tid 2117330] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.306466 2026] [core:error] [pid 2117880:tid 2117880] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.306544 2026] [core:error] [pid 2117880:tid 2117880] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.332122 2026] [core:error] [pid 2117316:tid 2117316] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.332185 2026] [core:error] [pid 2117316:tid 2117316] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.360962 2026] [core:error] [pid 2105506:tid 2105506] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.361045 2026] [core:error] [pid 2105506:tid 2105506] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.386896 2026] [core:error] [pid 2095811:tid 2095811] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.386948 2026] [core:error] [pid 2095811:tid 2095811] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.413456 2026] [core:error] [pid 2114505:tid 2114505] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.413556 2026] [core:error] [pid 2114505:tid 2114505] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.439441 2026] [core:error] [pid 2117331:tid 2117331] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.439507 2026] [core:error] [pid 2117331:tid 2117331] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.471377 2026] [core:error] [pid 2117330:tid 2117330] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.471439 2026] [core:error] [pid 2117330:tid 2117330] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.499987 2026] [core:error] [pid 2117316:tid 2117316] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.500024 2026] [core:error] [pid 2117316:tid 2117316] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.525934 2026] [core:error] [pid 2095811:tid 2095811] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.525979 2026] [core:error] [pid 2095811:tid 2095811] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.552560 2026] [core:error] [pid 2114505:tid 2114505] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.552613 2026] [core:error] [pid 2114505:tid 2114505] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.578490 2026] [core:error] [pid 2117331:tid 2117331] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.578546 2026] [core:error] [pid 2117331:tid 2117331] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.606737 2026] [core:error] [pid 2117330:tid 2117330] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.606787 2026] [core:error] [pid 2117330:tid 2117330] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.632245 2026] [core:error] [pid 2117316:tid 2117316] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:03.632288 2026] [core:error] [pid 2117316:tid 2117316] [client 20.100.192.217:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:04:04.309635 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:05.877079 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:07.387345 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:04:08.689914 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:10.064225 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:11.495355 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:12.758700 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:13.983623 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:15.371111 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:04:16.597182 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:17.489552 2026] [security2:error] [pid 2117316:tid 2117316] [client 157.55.39.10:0] ModSecurity: Warning. Matched phrase "-->" at ARGS:i. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "87"] [id "941180"] [rev "2"] [msg "Node-Validator Blacklist Keywords"] [data "Matched Data: --> found within ARGS:i: commercial-oil-machine-with-filter-->0$-\\x15@-$g2-.6@(-mm-25nw2msk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZmfQT1ptPcqn_sBRBekgwAAAAc"] [Sat Feb 21 17:04:17.880013 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:19.006644 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:04:19.194400 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:04:20.171690 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:21.639336 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:23.255803 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:24.716751 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:04:26.093847 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfSdpGmemyPzimpI2S_QAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 17:04:26.093977 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfSdpGmemyPzimpI2S_QAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda2%2Fsubsystem%2Fsda%2Fsubsystem%2Fsda%2Fmq%2F3 [Sat Feb 21 17:04:26.133124 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:27.507161 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:28.687680 2026] [security2:error] [pid 2114505:tid 2114505] [client 178.20.30.95:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmfS_lL1oUhZ4GbCuRB4AAAAAM"] [Sat Feb 21 17:04:28.687777 2026] [security2:error] [pid 2114505:tid 2114505] [client 178.20.30.95:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmfS_lL1oUhZ4GbCuRB4AAAAAM"] [Sat Feb 21 17:04:29.099712 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:30.532812 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:31.807404 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:33.233742 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:04:34.662157 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:36.457556 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:37.700261 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:39.422292 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:40.976098 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:04:42.324832 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:43.593772 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:45.075005 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:46.531635 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:47.953185 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:49.259922 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:50.686069 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:52.065178 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:53.306054 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:04:54.489862 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 178.20.30.95:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:02.174785 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:03.936877 2026] [access_compat:error] [pid 2117330:tid 2117330] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:05.629610 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:07.386419 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:09.203654 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:10.660704 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:12.280011 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:13.871692 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:15.565051 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:16.322763 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmffEgDADwSahU77SdFwAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5 [Sat Feb 21 17:05:16.322908 2026] [security2:error] [pid 2094465:tid 2094465] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmffEgDADwSahU77SdFwAAAABY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda1%2Fsubsystem%2Floop5 [Sat Feb 21 17:05:17.293543 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:05:18.814902 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:05:18.906851 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:05:20.143249 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:05:21.613423 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:23.363333 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:24.596951 2026] [security2:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmfg1rljTgaSsSbAKrgtgAAAAI"] [Sat Feb 21 17:05:24.597051 2026] [security2:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmfg1rljTgaSsSbAKrgtgAAAAI"] [Sat Feb 21 17:05:24.989048 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:26.713669 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:28.201324 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:29.738200 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfiSeNEOqmT-h8XHRTNgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:05:29.738305 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfiSeNEOqmT-h8XHRTNgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:05:29.763110 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:05:31.390635 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:33.175552 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:34.149692 2026] [security2:error] [pid 2117880:tid 2117880] [client 141.98.11.171:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "groopview.com"] [uri "/.env"] [unique_id "aZmfjlrljTgaSsSbAKrgvAAAAAI"] [Sat Feb 21 17:05:34.321789 2026] [security2:error] [pid 2112979:tid 2112979] [client 141.98.11.171:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "groopview.com"] [uri "/.env"] [unique_id "aZmfjiQS6FXrbdr5x_oQIAAAAAE"] [Sat Feb 21 17:05:35.279489 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:36.954719 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:38.478894 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:40.047535 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:05:41.577849 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:43.216165 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:44.762251 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:44.790333 2026] [security2:error] [pid 2112979:tid 2112979] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfmCQS6FXrbdr5x_oQJgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 17:05:44.790404 2026] [security2:error] [pid 2112979:tid 2112979] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfmCQS6FXrbdr5x_oQJgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 17:05:46.739772 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:48.520269 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:50.339024 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:05:51.970335 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:53.497571 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:55.047440 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:56.708208 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:58.246504 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:05:59.752203 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:06:00.426214 2026] [security2:error] [pid 2112979:tid 2112979] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmfpSQS6FXrbdr5x_oQLAAAAAE"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:06:00.426285 2026] [security2:error] [pid 2112979:tid 2112979] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmfpSQS6FXrbdr5x_oQLAAAAAE"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:06:01.579401 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:06:03.322053 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:06:05.045643 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:06:06.703965 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:06:08.438176 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 193.203.9.45:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:06:24.756568 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfwNN8QiXldctDSzEYgAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 17:06:24.756741 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmfwNN8QiXldctDSzEYgAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda%2Fdevice [Sat Feb 21 17:06:36.172882 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:06:36.347281 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:06:45.575564 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmf1QGCi3q8m6N5kGLXWwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:06:45.575736 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmf1QGCi3q8m6N5kGLXWwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:07:33.404529 2026] [authz_core:error] [pid 2118467:tid 2118467] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/error_log [Sat Feb 21 17:07:37.713374 2026] [authz_core:error] [pid 2119702:tid 2119702] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/sitemaps/providers/error_log [Sat Feb 21 17:07:42.576846 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:42.745525 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:42.912889 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:43.083347 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:43.280652 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:43.450593 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:43.617497 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:43.784121 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:43.951490 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:44.117485 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:44.283520 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:44.471659 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:44.642310 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:44.822129 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:45.000961 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:45.342168 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:45.529161 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:45.780981 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:45.948153 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:46.139859 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:46.308215 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:46.613810 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:46.780884 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:46.947495 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:47.113681 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:47.283702 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:47.450802 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:47.618202 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:48.079303 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:48.714830 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:48.912590 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:49.097039 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:49.263468 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:49.604086 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:49.955607 2026] [proxy_fcgi:error] [pid 2120626:tid 2120626] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:50.128637 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:50.295986 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:50.464027 2026] [proxy_fcgi:error] [pid 2120626:tid 2120626] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:50.641387 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:50.817575 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:51.752591 2026] [proxy_fcgi:error] [pid 2120626:tid 2120626] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:51.875718 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:51.875777 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.120162 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.120224 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.365974 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.366053 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.610491 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.610555 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.858713 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:52.858794 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.067118 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:53.103464 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.103512 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.253105 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:53.346459 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/x.php [Sat Feb 21 17:07:53.347813 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.420443 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:53.587035 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:53.590777 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/chosen.php [Sat Feb 21 17:07:53.591918 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.754271 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:53.835364 2026] [core:error] [pid 2112979:tid 2112979] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.835403 2026] [core:error] [pid 2112979:tid 2112979] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:53.922628 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:54.079731 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:54.079793 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:54.120647 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:54.293528 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:54.324116 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/okxh.php [Sat Feb 21 17:07:54.325457 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:54.572901 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/shell20211028.php [Sat Feb 21 17:07:54.574523 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:54.623253 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:54.789965 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:54.816874 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/zqhfn.php [Sat Feb 21 17:07:54.818198 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:54.957448 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:55.073440 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:55.073531 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:55.134255 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:55.315722 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/k.php [Sat Feb 21 17:07:55.316955 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:55.322659 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:55.565097 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:55.565140 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:55.680028 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:55.814970 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/403.php [Sat Feb 21 17:07:55.815845 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:55.846388 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:56.070386 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/fimai.php [Sat Feb 21 17:07:56.071692 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:56.201525 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:56.230640 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/166.php [Sat Feb 21 17:07:56.319416 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/maul.php [Sat Feb 21 17:07:56.320262 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:56.367070 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:56.495658 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/2026.php [Sat Feb 21 17:07:56.533653 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:56.563163 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/elp.php [Sat Feb 21 17:07:56.564599 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:56.758056 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/muzu.php [Sat Feb 21 17:07:56.806913 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/tt.php [Sat Feb 21 17:07:56.807625 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.019326 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/reze.php [Sat Feb 21 17:07:57.053779 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.053863 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.223170 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:07:57.298697 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.298759 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.304859 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/jsond.php [Sat Feb 21 17:07:57.541705 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/an.php [Sat Feb 21 17:07:57.542960 2026] [core:error] [pid 2112979:tid 2112979] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.561524 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/x7.php [Sat Feb 21 17:07:57.785448 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/orouu.php [Sat Feb 21 17:07:57.786255 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:57.829939 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bgymj.php [Sat Feb 21 17:07:58.048915 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/config.php [Sat Feb 21 17:07:58.050136 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:58.098258 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lala.php [Sat Feb 21 17:07:58.136915 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:58.292496 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/z.php [Sat Feb 21 17:07:58.293571 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:58.329373 2026] [proxy_fcgi:error] [pid 2112979:tid 2112979] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:58.357516 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/8xyz.php [Sat Feb 21 17:07:58.496560 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:58.535402 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/55b76.php [Sat Feb 21 17:07:58.536055 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:58.638971 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wsd.php [Sat Feb 21 17:07:58.688533 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:58.707334 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:07:58.780461 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:58.780524 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:58.877780 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:59.022672 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/kalso.php [Sat Feb 21 17:07:59.023650 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:59.048948 2026] [proxy_fcgi:error] [pid 2105506:tid 2105506] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:59.168377 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/la.php [Sat Feb 21 17:07:59.237472 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:59.266200 2026] [access_compat:error] [pid 2112979:tid 2112979] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/web.php [Sat Feb 21 17:07:59.267394 2026] [core:error] [pid 2112979:tid 2112979] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:59.419335 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:59.438986 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/Wp-good.php [Sat Feb 21 17:07:59.509925 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/5b9ac.php [Sat Feb 21 17:07:59.510935 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:59.585519 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:59.701206 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/tphp.php [Sat Feb 21 17:07:59.753624 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/system.php [Sat Feb 21 17:07:59.754857 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:07:59.890291 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:07:59.936291 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:07:59.960939 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/a1.php [Sat Feb 21 17:07:59.999830 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.010013 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.257640 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/byp.php [Sat Feb 21 17:08:00.259084 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.273953 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/nyan.php [Sat Feb 21 17:08:00.314585 2026] [proxy_fcgi:error] [pid 2120626:tid 2120626] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:00.506649 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.506789 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.509960 2026] [proxy_fcgi:error] [pid 2120690:tid 2120690] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:00.561186 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/autoload_classmap.php [Sat Feb 21 17:08:00.687750 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:00.752897 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.752942 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:00.854997 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:00.859417 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/alfa.php [Sat Feb 21 17:08:01.003805 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:01.022022 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:01.196721 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:01.253161 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:01.253272 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:01.364621 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:01.395600 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:01.401709 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/luxe.php [Sat Feb 21 17:08:01.495741 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/domains.php [Sat Feb 21 17:08:01.496818 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:01.770560 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/clss.php [Sat Feb 21 17:08:01.771753 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:01.947915 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rezor.php [Sat Feb 21 17:08:02.014520 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/autoload_classmap.php [Sat Feb 21 17:08:02.015259 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:02.104249 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:02.104862 2026] [security2:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/districthousing-global": Permission denied [hostname "districthousing.pk"] [uri "/alfashell.php"] [unique_id "aZmgIlrljTgaSsSbAKrhEgAAAAI"] [Sat Feb 21 17:08:02.104909 2026] [security2:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/districthousing-ip": Permission denied [hostname "districthousing.pk"] [uri "/alfashell.php"] [unique_id "aZmgIlrljTgaSsSbAKrhEgAAAAI"] [Sat Feb 21 17:08:02.228957 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/doc.php [Sat Feb 21 17:08:02.259500 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/byp.php [Sat Feb 21 17:08:02.260447 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:02.442739 2026] [proxy_fcgi:error] [pid 2094465:tid 2094465] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:02.508126 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:02.508217 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:02.618505 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:02.743548 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:02.751015 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/zc-104.php [Sat Feb 21 17:08:02.752139 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:02.785048 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:02.953889 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:02.998269 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:02.998311 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:03.031400 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/install.php [Sat Feb 21 17:08:03.254453 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/6kDPjgFTmvS.php [Sat Feb 21 17:08:03.255972 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:03.307463 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:03.474398 2026] [proxy_fcgi:error] [pid 2120626:tid 2120626] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:03.498530 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/vanda.php [Sat Feb 21 17:08:03.499206 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:03.562277 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sto.php [Sat Feb 21 17:08:03.641570 2026] [proxy_fcgi:error] [pid 2117880:tid 2117880] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:03.743867 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:03.743931 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:03.838672 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/x.php [Sat Feb 21 17:08:03.839577 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:03.874140 2026] [security2:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmgIj1ptPcqn_sBRBelCQAAAAc"] [Sat Feb 21 17:08:03.874267 2026] [security2:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmgIj1ptPcqn_sBRBelCQAAAAc"] [Sat Feb 21 17:08:03.986783 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/install.php [Sat Feb 21 17:08:03.987602 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:03.992757 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:08:03.999062 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:08:04.097909 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/test.php [Sat Feb 21 17:08:04.231670 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:04.231722 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:04.476152 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:04.476217 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:04.608978 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:05.036932 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/n3.php [Sat Feb 21 17:08:05.042557 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:05.042841 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:05.191028 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:05.288554 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:05.288610 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:05.367354 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:05.531110 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/gdn.php [Sat Feb 21 17:08:05.532069 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:05.533343 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:05.582655 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/o.php [Sat Feb 21 17:08:05.778099 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/cache.php [Sat Feb 21 17:08:05.779014 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:06.026263 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:06.026324 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:06.118930 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/class-t.api.php [Sat Feb 21 17:08:06.237314 2026] [proxy_fcgi:error] [pid 2119702:tid 2119702] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:06.271329 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/asd.php [Sat Feb 21 17:08:06.272366 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:06.500659 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:06.514666 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/favicon.php [Sat Feb 21 17:08:06.515545 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:06.642202 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp.php [Sat Feb 21 17:08:06.752975 2026] [proxy_fcgi:error] [pid 2120626:tid 2120626] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:06.758396 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/file.php [Sat Feb 21 17:08:06.759488 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:07.002129 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/rzki.php [Sat Feb 21 17:08:07.003201 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:07.249776 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/buy.php [Sat Feb 21 17:08:07.250697 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:07.454271 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/h.php [Sat Feb 21 17:08:07.492925 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/install.php [Sat Feb 21 17:08:07.493767 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:07.649019 2026] [proxy_fcgi:error] [pid 2120690:tid 2120690] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:07.709015 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:07.736745 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/inputs.php [Sat Feb 21 17:08:07.737586 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:07.960246 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wrt.php [Sat Feb 21 17:08:07.982267 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:07.982326 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:08.225789 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:08.225845 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:08.316169 2026] [proxy_fcgi:error] [pid 2114505:tid 2114505] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:08.468705 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/ws.php [Sat Feb 21 17:08:08.470216 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:08.651548 2026] [proxy_fcgi:error] [pid 2117331:tid 2117331] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:08.715346 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/44.php [Sat Feb 21 17:08:08.716508 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:08.817926 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 20.219.166.250:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:08:08.908385 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:08.963676 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:08.963716 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.033589 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/png.php [Sat Feb 21 17:08:09.205798 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/404.php [Sat Feb 21 17:08:09.206852 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.451270 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.451347 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.469170 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zwso.php [Sat Feb 21 17:08:09.699807 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.699848 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.943370 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:09.943451 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:10.188368 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:10.188446 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:10.318568 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:10.432692 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:10.432761 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:10.433313 2026] [security2:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "testtwo.onebox.pk"] [uri "/index.php"] [unique_id "aZmgKieNEOqmT-h8XHRTrQAAAAU"] [Sat Feb 21 17:08:10.433343 2026] [security2:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "testtwo.onebox.pk"] [uri "/index.php"] [unique_id "aZmgKieNEOqmT-h8XHRTrQAAAAU"] [Sat Feb 21 17:08:10.548175 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ton.php [Sat Feb 21 17:08:10.678240 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:10.829160 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wso.php [Sat Feb 21 17:08:10.921056 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/wp-config-sample.php [Sat Feb 21 17:08:10.922257 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.165185 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/rip.php [Sat Feb 21 17:08:11.166410 2026] [core:error] [pid 2117331:tid 2117331] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.354115 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/a2.php [Sat Feb 21 17:08:11.410005 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.410048 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.462389 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:08:11.608167 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/shell.php [Sat Feb 21 17:08:11.654821 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.654869 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.899138 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:11.899179 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:12.120361 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sxo.php [Sat Feb 21 17:08:12.144197 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:12.144257 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:12.386696 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/404.php [Sat Feb 21 17:08:12.387532 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:12.629523 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/wp-blog.php [Sat Feb 21 17:08:12.630799 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:12.825140 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/mans.php [Sat Feb 21 17:08:12.870221 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:12.886523 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/info.php [Sat Feb 21 17:08:12.887660 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:13.089151 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/dropdown.php [Sat Feb 21 17:08:13.141326 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:13.141381 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:13.396345 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/rip.php [Sat Feb 21 17:08:13.397983 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:13.604192 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ze.php [Sat Feb 21 17:08:13.640633 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/h.php [Sat Feb 21 17:08:13.641863 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:13.879859 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/geck.php [Sat Feb 21 17:08:13.883661 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/56c53.php [Sat Feb 21 17:08:13.884304 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:14.128147 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:14.128205 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:14.152405 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/menu.php [Sat Feb 21 17:08:14.344164 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:14.370995 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/i.php [Sat Feb 21 17:08:14.372234 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:14.615335 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/xsas.php [Sat Feb 21 17:08:14.616483 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:14.859030 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/varb.php [Sat Feb 21 17:08:14.860254 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:14.947539 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/flower.php [Sat Feb 21 17:08:15.104989 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:15.105034 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:15.230451 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ftp.php [Sat Feb 21 17:08:15.347043 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/xxzdc.php [Sat Feb 21 17:08:15.348045 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:15.504149 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/mds.php [Sat Feb 21 17:08:15.590582 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/gdn.php [Sat Feb 21 17:08:15.591834 2026] [core:error] [pid 2114505:tid 2114505] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:15.693718 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:15.768912 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ahax.php [Sat Feb 21 17:08:15.834049 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/elp.php [Sat Feb 21 17:08:15.835333 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:15.900120 2026] [security2:error] [pid 2117331:tid 2117331] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgLtN8QiXldctDSzEY1gAAAAo"] [Sat Feb 21 17:08:15.900173 2026] [security2:error] [pid 2117331:tid 2117331] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgLtN8QiXldctDSzEY1gAAAAo"] [Sat Feb 21 17:08:16.079539 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/144.php [Sat Feb 21 17:08:16.080760 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:16.307960 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/cool.php [Sat Feb 21 17:08:16.324522 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:16.324567 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:16.567318 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/wp-conf.php [Sat Feb 21 17:08:16.568262 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:16.578605 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gm.php [Sat Feb 21 17:08:16.816257 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:16.816323 2026] [core:error] [pid 2119702:tid 2119702] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:16.822899 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/simple.php [Sat Feb 21 17:08:16.932124 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:17.058443 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/lm15.php [Sat Feb 21 17:08:17.059511 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:17.097515 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/elp.php [Sat Feb 21 17:08:17.301593 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/inputs.php [Sat Feb 21 17:08:17.304835 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:17.358777 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bolt.php [Sat Feb 21 17:08:17.447605 2026] [security2:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgMXlxa6dA2xI1W4ieUgAAAAk"] [Sat Feb 21 17:08:17.447693 2026] [security2:error] [pid 2120690:tid 2120690] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgMXlxa6dA2xI1W4ieUgAAAAk"] [Sat Feb 21 17:08:17.558450 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:17.558511 2026] [core:error] [pid 2094465:tid 2094465] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:17.803958 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:17.804038 2026] [core:error] [pid 2120626:tid 2120626] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:17.884595 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/inputs.php [Sat Feb 21 17:08:18.048144 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/d12.php [Sat Feb 21 17:08:18.049503 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:18.217477 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:18.298815 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/test.php [Sat Feb 21 17:08:18.299840 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:18.434214 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/system.php [Sat Feb 21 17:08:18.542094 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/hehe.php [Sat Feb 21 17:08:18.543511 2026] [core:error] [pid 2117880:tid 2117880] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:18.789404 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:18.789468 2026] [core:error] [pid 2117316:tid 2117316] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:19.031567 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/themes.php [Sat Feb 21 17:08:19.032279 2026] [core:error] [pid 2118467:tid 2118467] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:19.274546 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/bo.php [Sat Feb 21 17:08:19.275254 2026] [core:error] [pid 2120690:tid 2120690] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:19.517622 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/a5e0a.php [Sat Feb 21 17:08:19.518619 2026] [core:error] [pid 2095811:tid 2095811] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:19.529594 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/an.php [Sat Feb 21 17:08:19.579603 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:08:19.761456 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testtwo.onebox.pk/z.php [Sat Feb 21 17:08:19.762657 2026] [core:error] [pid 2105506:tid 2105506] [client 20.189.202.45:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:08:19.788486 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/w.php [Sat Feb 21 17:08:20.057568 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gmo.php [Sat Feb 21 17:08:20.337252 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gib.php [Sat Feb 21 17:08:20.632672 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-miiss.php.php [Sat Feb 21 17:08:21.033998 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:21.168277 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/moon.php [Sat Feb 21 17:08:21.453626 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/filesss.php [Sat Feb 21 17:08:21.728946 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/hey.php [Sat Feb 21 17:08:22.174108 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/1337.php [Sat Feb 21 17:08:22.280438 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:22.450943 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/buy.php [Sat Feb 21 17:08:22.556953 2026] [security2:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgNj1ptPcqn_sBRBelHgAAAAc"] [Sat Feb 21 17:08:22.557026 2026] [security2:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgNj1ptPcqn_sBRBelHgAAAAc"] [Sat Feb 21 17:08:22.996071 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/m.php [Sat Feb 21 17:08:23.256979 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-is.php [Sat Feb 21 17:08:23.520254 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/jmfi2.php [Sat Feb 21 17:08:23.647150 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:24.077589 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bnn_.php [Sat Feb 21 17:08:24.584180 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/hzz.php [Sat Feb 21 17:08:24.841652 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:24.867549 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/shell20211028.php [Sat Feb 21 17:08:25.685135 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ps.php [Sat Feb 21 17:08:26.157522 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:26.473564 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/cache.php [Sat Feb 21 17:08:26.748631 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ss.php [Sat Feb 21 17:08:27.018466 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/p.php [Sat Feb 21 17:08:27.102975 2026] [security2:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgO9N8QiXldctDSzEY4QAAAAo"] [Sat Feb 21 17:08:27.103061 2026] [security2:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgO9N8QiXldctDSzEY4QAAAAo"] [Sat Feb 21 17:08:27.297597 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:08:27.545404 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/user.php [Sat Feb 21 17:08:28.383717 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:28.505634 2026] [security2:error] [pid 2120626:tid 2120626] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgOzBcjt8wY0uAwRXUkwAAAAg"] [Sat Feb 21 17:08:28.505698 2026] [security2:error] [pid 2120626:tid 2120626] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgOzBcjt8wY0uAwRXUkwAAAAg"] [Sat Feb 21 17:08:29.563047 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:30.778093 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:31.887612 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:32.539153 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp.php [Sat Feb 21 17:08:32.804508 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rip.php [Sat Feb 21 17:08:33.057804 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp4.php [Sat Feb 21 17:08:33.305061 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:33.326291 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/403.php [Sat Feb 21 17:08:33.882639 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/asd67.php [Sat Feb 21 17:08:34.402868 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/oivcl.php [Sat Feb 21 17:08:34.509540 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:08:35.210167 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/v2.php [Sat Feb 21 17:08:35.754852 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:36.326709 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/dr.php [Sat Feb 21 17:08:36.593756 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/raw.php [Sat Feb 21 17:08:37.245160 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:37.331953 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ioxi-o2.php [Sat Feb 21 17:08:37.596094 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/dropdown.php [Sat Feb 21 17:08:37.860910 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/dlu.php [Sat Feb 21 17:08:38.368361 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/db.php [Sat Feb 21 17:08:38.439291 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:38.618497 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/packed.php [Sat Feb 21 17:08:38.892373 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-configs.php [Sat Feb 21 17:08:39.156932 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/404.php [Sat Feb 21 17:08:39.427473 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/des.php [Sat Feb 21 17:08:39.686565 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:39.941023 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 4.193.219.127:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lufix.php [Sat Feb 21 17:08:40.988690 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:08:42.324047 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:43.720385 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:45.067094 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:46.257478 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:47.130843 2026] [security2:error] [pid 2105506:tid 2105506] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgTgGCi3q8m6N5kGLXvgAAAAY"] [Sat Feb 21 17:08:47.130933 2026] [security2:error] [pid 2105506:tid 2105506] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgTgGCi3q8m6N5kGLXvgAAAAY"] [Sat Feb 21 17:08:47.328201 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:08:47.418628 2026] [authz_core:error] [pid 2094465:tid 2094465] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/PHPMailer/error_log [Sat Feb 21 17:08:48.462790 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 45.227.253.162:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:08:49.856177 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgUT1ptPcqn_sBRBelNgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5 [Sat Feb 21 17:08:49.856266 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgUT1ptPcqn_sBRBelNgAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop5 [Sat Feb 21 17:08:51.390840 2026] [security2:error] [pid 2119702:tid 2119702] [client 209.50.162.68:0] ModSecurity: Warning. Found 1 byte(s) in REQUEST_URI outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "www.serversvalley.com"] [uri "/contact.html"] [unique_id "aZmgUyeNEOqmT-h8XHRT0gAAAAU"], referer: https://www.serversvalley.com/contact.html [Sat Feb 21 17:08:51.390947 2026] [security2:error] [pid 2119702:tid 2119702] [client 209.50.162.68:0] ModSecurity: Warning. Found 1 byte(s) in ARGS:token outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "287"] [id "920270"] [rev "2"] [msg "Invalid character in request (null character)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "www.serversvalley.com"] [uri "/contact.html"] [unique_id "aZmgUyeNEOqmT-h8XHRT0gAAAAU"], referer: https://www.serversvalley.com/contact.html [Sat Feb 21 17:08:55.894128 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgV_lL1oUhZ4GbCuRClAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:08:55.894189 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgV_lL1oUhZ4GbCuRClAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:08:58.328230 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:09:00.048295 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:01.889625 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:02.213383 2026] [security2:error] [pid 2120626:tid 2120626] [client 20.213.152.227:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-global": Permission denied [hostname "akcpa.sa"] [uri "/cgi-sys/ea-php83/server.php"] [unique_id "aZmgXTBcjt8wY0uAwRXUrQAAAAg"] [Sat Feb 21 17:09:02.213520 2026] [security2:error] [pid 2120626:tid 2120626] [client 20.213.152.227:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-ip": Permission denied [hostname "akcpa.sa"] [uri "/cgi-sys/ea-php83/server.php"] [unique_id "aZmgXTBcjt8wY0uAwRXUrQAAAAg"] [Sat Feb 21 17:09:03.635620 2026] [access_compat:error] [pid 2120626:tid 2120626] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:05.336171 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:06.964888 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:08.600124 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:09:10.062251 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:10.067755 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:09:11.679918 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:13.337017 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:13.723728 2026] [authz_core:error] [pid 2094465:tid 2094465] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/block-supports/error_log [Sat Feb 21 17:09:14.918995 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:15.518599 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmga9N8QiXldctDSzEZBwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:09:15.518663 2026] [security2:error] [pid 2117331:tid 2117331] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmga9N8QiXldctDSzEZBwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:09:16.463111 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:18.233297 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:09:19.694205 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:21.176327 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:22.813377 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:24.203790 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:25.618006 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:27.100153 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:09:28.686080 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:28.881584 2026] [core:error] [pid 2117316:tid 2117316] [client 43.166.244.251:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:09:28.881667 2026] [core:error] [pid 2117316:tid 2117316] [client 43.166.244.251:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:09:30.354388 2026] [access_compat:error] [pid 2094465:tid 2094465] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:31.869536 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:33.759603 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:34.967248 2026] [security2:error] [pid 2117880:tid 2117880] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgfVrljTgaSsSbAKrhYAAAAAI"] [Sat Feb 21 17:09:34.967343 2026] [security2:error] [pid 2117880:tid 2117880] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgfVrljTgaSsSbAKrhYAAAAAI"] [Sat Feb 21 17:09:35.255537 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:36.789583 2026] [authz_core:error] [pid 2094465:tid 2094465] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/customize/error_log [Sat Feb 21 17:09:36.821672 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:09:37.036819 2026] [authz_core:error] [pid 2117316:tid 2117316] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/rest-api/fields/error_log [Sat Feb 21 17:09:38.389066 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:40.000442 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:41.442155 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:43.091778 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:44.562943 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:09:44.700874 2026] [security2:error] [pid 2114505:tid 2114505] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmghflL1oUhZ4GbCuRCrwAAAAM"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:09:44.700938 2026] [security2:error] [pid 2114505:tid 2114505] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmghflL1oUhZ4GbCuRCrwAAAAM"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:09:45.985622 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:47.404364 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:48.625727 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:09:49.986997 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:51.408607 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:51.890696 2026] [security2:error] [pid 2117880:tid 2117880] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgj1rljTgaSsSbAKrhawAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop3 [Sat Feb 21 17:09:51.890814 2026] [security2:error] [pid 2117880:tid 2117880] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgj1rljTgaSsSbAKrhawAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fsubsystem%2Floop3 [Sat Feb 21 17:09:52.894477 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:54.457681 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:55.946707 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:57.558678 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:09:59.161377 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:00.719844 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 212.119.46.117:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:03.841934 2026] [authz_core:error] [pid 2114505:tid 2114505] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/rest-api/error_log [Sat Feb 21 17:10:08.735246 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:10.114251 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:11.475601 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:12.671608 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:14.168450 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:15.338413 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:16.549715 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:17.820336 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:18.020110 2026] [security2:error] [pid 2117331:tid 2117331] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgqNN8QiXldctDSzEZLQAAAAo"] [Sat Feb 21 17:10:18.020184 2026] [security2:error] [pid 2117331:tid 2117331] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmgqNN8QiXldctDSzEZLQAAAAo"] [Sat Feb 21 17:10:19.066499 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:20.372978 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 17:10:21.615725 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:10:21.952456 2026] [authz_core:error] [pid 2121618:tid 2121618] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/IXR/error_log [Sat Feb 21 17:10:22.884577 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:24.241089 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:25.593035 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:26.905500 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:27.660808 2026] [security2:error] [pid 2117316:tid 2117316] [client 66.249.68.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmgsz1ptPcqn_sBRBeleQAAAAc"] [Sat Feb 21 17:10:27.660902 2026] [security2:error] [pid 2117316:tid 2117316] [client 66.249.68.8:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmgsz1ptPcqn_sBRBeleQAAAAc"] [Sat Feb 21 17:10:28.321588 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:29.925772 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:10:31.269422 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:32.456095 2026] [security2:error] [pid 2117316:tid 2117316] [client 5.183.255.177:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmgtz1ptPcqn_sBRBelfAAAAAc"] [Sat Feb 21 17:10:32.456180 2026] [security2:error] [pid 2117316:tid 2117316] [client 5.183.255.177:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmgtz1ptPcqn_sBRBelfAAAAAc"] [Sat Feb 21 17:10:32.621092 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:34.042441 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:35.382945 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:36.671542 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:38.058404 2026] [access_compat:error] [pid 2120690:tid 2120690] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:10:38.347424 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgvieNEOqmT-h8XHRUHgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:10:38.347514 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmgvieNEOqmT-h8XHRUHgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:10:39.506700 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:40.908287 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:42.340230 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:43.903473 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:45.222004 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:46.435680 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:10:47.735195 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:49.026122 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:10:50.110861 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:50.787133 2026] [authz_core:error] [pid 2119702:tid 2119702] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/theme-compat/error_log [Sat Feb 21 17:10:51.041585 2026] [authz_core:error] [pid 2118467:tid 2118467] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-admin/includes/error_log [Sat Feb 21 17:10:51.645104 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:53.157762 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:53.447567 2026] [security2:error] [pid 2105506:tid 2105506] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-content/plugins/index.php"] [unique_id "aZmgzQGCi3q8m6N5kGLYEgAAAAY"] [Sat Feb 21 17:10:53.447673 2026] [security2:error] [pid 2105506:tid 2105506] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/wp-content/plugins/index.php"] [unique_id "aZmgzQGCi3q8m6N5kGLYEgAAAAY"] [Sat Feb 21 17:10:54.548209 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:56.009527 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/themes.php [Sat Feb 21 17:10:57.251024 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:58.649573 2026] [access_compat:error] [pid 2117331:tid 2117331] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:10:59.924687 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:11:01.435695 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:11:02.995114 2026] [access_compat:error] [pid 2117880:tid 2117880] [client 5.183.255.177:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 17:11:08.195607 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:11:09.196886 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:11:44.168874 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhAPlL1oUhZ4GbCuRC9wAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:11:44.168969 2026] [security2:error] [pid 2114505:tid 2114505] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhAPlL1oUhZ4GbCuRC9wAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:11:45.046177 2026] [security2:error] [pid 2095811:tid 2095811] [client 103.161.54.37:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-global": Permission denied [hostname "ahk.com.pk"] [uri "/xmlrpc.php"] [unique_id "aZmhANpGmemyPzimpI2UKgAAAAA"] [Sat Feb 21 17:11:45.046272 2026] [security2:error] [pid 2095811:tid 2095811] [client 103.161.54.37:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/ahkcompk-ip": Permission denied [hostname "ahk.com.pk"] [uri "/xmlrpc.php"] [unique_id "aZmhANpGmemyPzimpI2UKgAAAAA"] [Sat Feb 21 17:11:49.610922 2026] [access_compat:error] [pid 2114505:tid 2114505] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:12:13.271581 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:12:14.255113 2026] [security2:error] [pid 2118467:tid 2118467] [client 209.38.37.198:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmhHVAuKWjBndpBvNwNfAAAAAQ"] [Sat Feb 21 17:12:14.255179 2026] [security2:error] [pid 2118467:tid 2118467] [client 209.38.37.198:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmhHVAuKWjBndpBvNwNfAAAAAQ"] [Sat Feb 21 17:12:17.298692 2026] [security2:error] [pid 2119702:tid 2119702] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmhHieNEOqmT-h8XHRUVAAAAAU"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:12:17.298785 2026] [security2:error] [pid 2119702:tid 2119702] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmhHieNEOqmT-h8XHRUVAAAAAU"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:12:33.203913 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhMSeNEOqmT-h8XHRUXQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 17:12:33.204004 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhMSeNEOqmT-h8XHRUXQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda3%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 17:12:33.867379 2026] [authz_core:error] [pid 2122965:tid 2122965] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/Requests/library/error_log [Sat Feb 21 17:13:30.151676 2026] [security2:error] [pid 2121618:tid 2121618] [client 182.48.76.130:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/xmlrpc.php"] [unique_id "aZmhaBxmZo-HQv7YnF7CvwAAAAE"] [Sat Feb 21 17:13:30.151775 2026] [security2:error] [pid 2121618:tid 2121618] [client 182.48.76.130:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/xmlrpc.php"] [unique_id "aZmhaBxmZo-HQv7YnF7CvwAAAAE"] [Sat Feb 21 17:13:32.127546 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhbKoDJThE-FC2DU3EDAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 17:13:32.127612 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhbKoDJThE-FC2DU3EDAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 17:13:32.364878 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:13:35.579895 2026] [access_compat:error] [pid 2124035:tid 2124035] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:13:40.266166 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.55.39.193:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmhc1AuKWjBndpBvNwNpgAAAAQ"] [Sat Feb 21 17:13:40.266252 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.55.39.193:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "www.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZmhc1AuKWjBndpBvNwNpgAAAAQ"] [Sat Feb 21 17:13:41.377548 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:13:54.029692 2026] [authz_core:error] [pid 2117316:tid 2117316] [client 104.46.216.98:0] AH01630: client denied by server configuration: /home/surf/public_html/wp-includes/block-bindings/error_log [Sat Feb 21 17:13:57.502228 2026] [security2:error] [pid 2122965:tid 2122965] [client 144.76.32.189:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/pebitech-global": Permission denied [hostname "pebi.tech"] [uri "/robots.txt"] [unique_id "aZmhhftESZ8OtrhBvYu4GAAAAAg"] [Sat Feb 21 17:13:57.502320 2026] [security2:error] [pid 2122965:tid 2122965] [client 144.76.32.189:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/pebitech-ip": Permission denied [hostname "pebi.tech"] [uri "/robots.txt"] [unique_id "aZmhhftESZ8OtrhBvYu4GAAAAAg"] [Sat Feb 21 17:14:02.616854 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhiieNEOqmT-h8XHRUjAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop0 [Sat Feb 21 17:14:02.616907 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhiieNEOqmT-h8XHRUjAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop0 [Sat Feb 21 17:14:09.505764 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhkVAuKWjBndpBvNwNtgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fmq [Sat Feb 21 17:14:09.505832 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhkVAuKWjBndpBvNwNtgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop0%2Fmq [Sat Feb 21 17:14:18.209995 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhmj1ptPcqn_sBRBel9QAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:14:18.210159 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhmj1ptPcqn_sBRBel9QAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:14:42.088058 2026] [security2:error] [pid 2122965:tid 2122965] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-global": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmhsPtESZ8OtrhBvYu4MAAAAAg"] [Sat Feb 21 17:14:42.088122 2026] [security2:error] [pid 2122965:tid 2122965] [client 104.46.216.98:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/surf-ip": Permission denied [hostname "surfoye.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmhsPtESZ8OtrhBvYu4MAAAAAg"] [Sat Feb 21 17:14:56.820035 2026] [security2:error] [pid 2095811:tid 2095811] [client 114.119.131.97:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmhvtpGmemyPzimpI2UjgAAAAA"] [Sat Feb 21 17:14:56.820116 2026] [security2:error] [pid 2095811:tid 2095811] [client 114.119.131.97:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmhvtpGmemyPzimpI2UjgAAAAA"] [Sat Feb 21 17:15:02.504275 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhxvtESZ8OtrhBvYu4OAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 17:15:02.504426 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmhxvtESZ8OtrhBvYu4OAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 17:15:38.165455 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmh6hBFSwbWxfUieigwwwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:15:38.165590 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmh6hBFSwbWxfUieigwwwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:15:38.817773 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:15:48.315710 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmh9AGCi3q8m6N5kGLYpgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:15:48.315843 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmh9AGCi3q8m6N5kGLYpgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:15:51.362953 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmh9z1ptPcqn_sBRBemIAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:15:51.363063 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmh9z1ptPcqn_sBRBemIAAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:16:03.036246 2026] [security2:error] [pid 2095811:tid 2095811] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZmiA9pGmemyPzimpI2UpgAAAAA"] [Sat Feb 21 17:16:25.645868 2026] [security2:error] [pid 2121618:tid 2121618] [client 51.195.244.215:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-global": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmiGRxmZo-HQv7YnF7DFgAAAAE"] [Sat Feb 21 17:16:25.645963 2026] [security2:error] [pid 2121618:tid 2121618] [client 51.195.244.215:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdt-ip": Permission denied [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmiGRxmZo-HQv7YnF7DFgAAAAE"] [Sat Feb 21 17:16:25.646040 2026] [security2:error] [pid 2121618:tid 2121618] [client 51.195.244.215:0] ModSecurity: Audit log: Failed to create subdirectories: /etc/apache2/logs/modsec_audit/mrxdt/20260221/20260221-1716 (Permission denied) [hostname "mrxdt.com"] [uri "/index.php"] [unique_id "aZmiGRxmZo-HQv7YnF7DFgAAAAE"] [Sat Feb 21 17:16:39.605473 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiJ73uIV3bsvQ7E2e-TAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop5 [Sat Feb 21 17:16:39.605553 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiJ73uIV3bsvQ7E2e-TAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop5 [Sat Feb 21 17:16:52.204972 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiNBxmZo-HQv7YnF7DIQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 17:16:52.205054 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiNBxmZo-HQv7YnF7DIQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop5%2Fsubsystem%2Floop1%2Fmq%2F0 [Sat Feb 21 17:17:03.874288 2026] [cgi:error] [pid 2123474:tid 2123474] [client 104.46.239.31:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden [Sat Feb 21 17:17:03.874530 2026] [cgi:error] [pid 2123474:tid 2123474] [client 104.46.239.31:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157. [Sat Feb 21 17:17:04.010793 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:17:27.624740 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiV73uIV3bsvQ7E2e-awAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 17:17:27.624831 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiV73uIV3bsvQ7E2e-awAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 17:17:28.610740 2026] [security2:error] [pid 2119702:tid 2119702] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-global": Permission denied [hostname "mail.maktechpartners.com"] [uri "/55b76.php"] [unique_id "aZmiWCeNEOqmT-h8XHRU8wAAAAU"] [Sat Feb 21 17:17:28.610818 2026] [security2:error] [pid 2119702:tid 2119702] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-ip": Permission denied [hostname "mail.maktechpartners.com"] [uri "/55b76.php"] [unique_id "aZmiWCeNEOqmT-h8XHRU8wAAAAU"] [Sat Feb 21 17:17:28.732566 2026] [security2:error] [pid 2105506:tid 2105506] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmiWAGCi3q8m6N5kGLY2gAAAAY"] [Sat Feb 21 17:17:30.583161 2026] [cgi:error] [pid 2117316:tid 2117316] [client 104.46.239.31:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: 403 (Forbidden): 403 Forbidden [Sat Feb 21 17:17:30.583312 2026] [cgi:error] [pid 2117316:tid 2117316] [client 104.46.239.31:0] AH01215: stderr from /usr/local/cpanel/cgi-sys/suspendedpage.cgi: Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157. [Sat Feb 21 17:17:36.454233 2026] [negotiation:error] [pid 2119702:tid 2119702] [client 104.46.239.31:0] AH00687: Negotiation: discovered file(s) matching request: /home/maktechpartners/public_html/index (None could be negotiated). [Sat Feb 21 17:17:50.368518 2026] [security2:error] [pid 2121618:tid 2121618] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmiaRxmZo-HQv7YnF7DQgAAAAE"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:17:50.368636 2026] [security2:error] [pid 2121618:tid 2121618] [client 167.71.198.167:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmiaRxmZo-HQv7YnF7DQgAAAAE"], referer: https://www.3mlittmann.us/wp-login.php [Sat Feb 21 17:18:08.600515 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:18:10.494021 2026] [security2:error] [pid 2105506:tid 2105506] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo.redpenguinit.com"] [uri "/.git/config"] [unique_id "aZmiggGCi3q8m6N5kGLY9QAAAAY"] [Sat Feb 21 17:18:10.547805 2026] [security2:error] [pid 2095811:tid 2095811] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo.redpenguinit.com"] [uri "/api/.env"] [unique_id "aZmigtpGmemyPzimpI2U9AAAAAA"] [Sat Feb 21 17:18:11.076654 2026] [security2:error] [pid 2123474:tid 2123474] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo.redpenguinit.com"] [uri "/.env"] [unique_id "aZmig73uIV3bsvQ7E2e-jAAAAAI"] [Sat Feb 21 17:18:33.014915 2026] [security2:error] [pid 2124035:tid 2124035] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-global": Permission denied [hostname "mail.maktechpartners.com"] [uri "/a5e0a.php"] [unique_id "aZmimaoDJThE-FC2DU3EtwAAAAk"] [Sat Feb 21 17:18:33.015011 2026] [security2:error] [pid 2124035:tid 2124035] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-ip": Permission denied [hostname "mail.maktechpartners.com"] [uri "/a5e0a.php"] [unique_id "aZmimaoDJThE-FC2DU3EtwAAAAk"] [Sat Feb 21 17:18:33.472716 2026] [security2:error] [pid 2105506:tid 2105506] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-global": Permission denied [hostname "mail.maktechpartners.com"] [uri "/z.php"] [unique_id "aZmimQGCi3q8m6N5kGLZBgAAAAY"] [Sat Feb 21 17:18:33.472782 2026] [security2:error] [pid 2105506:tid 2105506] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-ip": Permission denied [hostname "mail.maktechpartners.com"] [uri "/z.php"] [unique_id "aZmimQGCi3q8m6N5kGLZBgAAAAY"] [Sat Feb 21 17:19:09.629455 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmivRxmZo-HQv7YnF7DcwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 17:19:09.629545 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmivRxmZo-HQv7YnF7DcwAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 17:19:12.203119 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiwL3uIV3bsvQ7E2e-sAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:19:12.203207 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmiwL3uIV3bsvQ7E2e-sAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:19:19.429033 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:19:52.686945 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmi6BxmZo-HQv7YnF7DhQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:19:52.687073 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmi6BxmZo-HQv7YnF7DhQAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:20:37.400104 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjFaoDJThE-FC2DU3E7QAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:20:37.400242 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjFaoDJThE-FC2DU3E7QAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:20:42.404220 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjGqoDJThE-FC2DU3E7wAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:20:42.404420 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjGqoDJThE-FC2DU3E7wAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:21:31.963522 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:21:51.408082 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjX6oDJThE-FC2DU3FDQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 17:21:51.408234 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjX6oDJThE-FC2DU3FDQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 17:21:58.772911 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjZvtESZ8OtrhBvYu5CgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:21:58.773065 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjZvtESZ8OtrhBvYu5CgAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:22:04.626307 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjbBBFSwbWxfUieigxjgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 17:22:04.626425 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjbBBFSwbWxfUieigxjgAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 17:22:05.141277 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjbQGCi3q8m6N5kGLZYgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 17:22:05.141566 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjbQGCi3q8m6N5kGLZYgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fpower [Sat Feb 21 17:22:06.133520 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjbhxmZo-HQv7YnF7DwQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:22:06.133612 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjbhxmZo-HQv7YnF7DwQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:22:27.293642 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjgwGCi3q8m6N5kGLZbAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:22:27.293724 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjgwGCi3q8m6N5kGLZbAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:22:29.601428 2026] [security2:error] [pid 2124035:tid 2124035] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZmjhaoDJThE-FC2DU3FHwAAAAk"] [Sat Feb 21 17:22:29.601429 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.container"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.container"] [unique_id "aZmjhRxmZo-HQv7YnF7DywAAAAE"] [Sat Feb 21 17:22:29.601434 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/symfony/.env"] [unique_id "aZmjhRBFSwbWxfUieigxmQAAAAM"] [Sat Feb 21 17:22:29.603596 2026] [security2:error] [pid 2119702:tid 2119702] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.prod"] [unique_id "aZmjhSeNEOqmT-h8XHRVgAAAAAU"] [Sat Feb 21 17:22:29.604884 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.test"] [unique_id "aZmjhftESZ8OtrhBvYu5FQAAAAg"] [Sat Feb 21 17:22:29.606862 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.old"] [unique_id "aZmjhVAuKWjBndpBvNwOqwAAAAQ"] [Sat Feb 21 17:22:29.610452 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.staging"] [unique_id "aZmjhT1ptPcqn_sBRBem5QAAAAc"] [Sat Feb 21 17:22:29.619362 2026] [security2:error] [pid 2123474:tid 2123474] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.development"] [unique_id "aZmjhb3uIV3bsvQ7E2e_AwAAAAI"] [Sat Feb 21 17:22:29.627568 2026] [security2:error] [pid 2119702:tid 2119702] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/symfony/.env.local"] [unique_id "aZmjhSeNEOqmT-h8XHRVgQAAAAU"] [Sat Feb 21 17:22:29.630148 2026] [security2:error] [pid 2095811:tid 2095811] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/symfony/.env.dev"] [unique_id "aZmjhdpGmemyPzimpI2VawAAAAA"] [Sat Feb 21 17:22:29.634135 2026] [security2:error] [pid 2124035:tid 2124035] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.testing"] [unique_id "aZmjhaoDJThE-FC2DU3FIAAAAAk"] [Sat Feb 21 17:22:29.638379 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.local"] [unique_id "aZmjhRBFSwbWxfUieigxmgAAAAM"] [Sat Feb 21 17:22:29.644583 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.backup"] [unique_id "aZmjhT1ptPcqn_sBRBem5gAAAAc"] [Sat Feb 21 17:22:29.656455 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.save"] [unique_id "aZmjhQGCi3q8m6N5kGLZbwAAAAY"] [Sat Feb 21 17:22:29.663192 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/public/.env"] [unique_id "aZmjhftESZ8OtrhBvYu5FwAAAAg"] [Sat Feb 21 17:22:29.664192 2026] [security2:error] [pid 2124035:tid 2124035] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/node/.env.development"] [unique_id "aZmjhaoDJThE-FC2DU3FIQAAAAk"] [Sat Feb 21 17:22:29.671115 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.example"] [unique_id "aZmjhVAuKWjBndpBvNwOrQAAAAQ"] [Sat Feb 21 17:22:29.674132 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/laravel/.env"] [unique_id "aZmjhT1ptPcqn_sBRBem5wAAAAc"] [Sat Feb 21 17:22:29.675244 2026] [security2:error] [pid 2123474:tid 2123474] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/frontend/.env"] [unique_id "aZmjhb3uIV3bsvQ7E2e_BQAAAAI"] [Sat Feb 21 17:22:29.686786 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.production"] [unique_id "aZmjhftESZ8OtrhBvYu5GAAAAAg"] [Sat Feb 21 17:22:29.692334 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/node/.env.production"] [unique_id "aZmjhRBFSwbWxfUieigxnAAAAAM"] [Sat Feb 21 17:22:29.696317 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/django/.env"] [unique_id "aZmjhVAuKWjBndpBvNwOrgAAAAQ"] [Sat Feb 21 17:22:29.698357 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/node/.env"] [unique_id "aZmjhT1ptPcqn_sBRBem6AAAAAc"] [Sat Feb 21 17:22:29.700685 2026] [security2:error] [pid 2123474:tid 2123474] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/api/.env"] [unique_id "aZmjhb3uIV3bsvQ7E2e_BgAAAAI"] [Sat Feb 21 17:22:29.704522 2026] [security2:error] [pid 2119702:tid 2119702] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/www/.env"] [unique_id "aZmjhSeNEOqmT-h8XHRVhAAAAAU"] [Sat Feb 21 17:22:29.715269 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/backend/.env"] [unique_id "aZmjhRxmZo-HQv7YnF7DzwAAAAE"] [Sat Feb 21 17:22:29.718481 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.docker"] [unique_id "aZmjhRBFSwbWxfUieigxnQAAAAM"] [Sat Feb 21 17:22:29.721257 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.git/config"] [unique_id "aZmjhVAuKWjBndpBvNwOrwAAAAQ"] [Sat Feb 21 17:22:29.724135 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/django/.env.prod"] [unique_id "aZmjhT1ptPcqn_sBRBem6QAAAAc"] [Sat Feb 21 17:22:29.729143 2026] [security2:error] [pid 2119702:tid 2119702] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.dist"] [unique_id "aZmjhSeNEOqmT-h8XHRVhQAAAAU"] [Sat Feb 21 17:22:29.731323 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/wp-config.php"] [unique_id "aZmjhQGCi3q8m6N5kGLZcgAAAAY"] [Sat Feb 21 17:22:29.733981 2026] [security2:error] [pid 2095811:tid 2095811] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.dev"] [unique_id "aZmjhdpGmemyPzimpI2VbwAAAAA"] [Sat Feb 21 17:22:29.736401 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/app/.env"] [unique_id "aZmjhftESZ8OtrhBvYu5GgAAAAg"] [Sat Feb 21 17:22:29.738716 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/html/.env"] [unique_id "aZmjhRxmZo-HQv7YnF7D0AAAAAE"] [Sat Feb 21 17:22:29.744608 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/admin/.env"] [unique_id "aZmjhT1ptPcqn_sBRBem6gAAAAc"] [Sat Feb 21 17:22:29.749494 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/www/.env"] [unique_id "aZmjhVAuKWjBndpBvNwOsAAAAAQ"] [Sat Feb 21 17:22:29.758309 2026] [security2:error] [pid 2119702:tid 2119702] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.git/config"] [unique_id "aZmjhSeNEOqmT-h8XHRVhgAAAAU"] [Sat Feb 21 17:22:29.766361 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/symfony/.env.local"] [unique_id "aZmjhQGCi3q8m6N5kGLZcwAAAAY"] [Sat Feb 21 17:22:29.775241 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.container"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.container"] [unique_id "aZmjhRxmZo-HQv7YnF7D0QAAAAE"] [Sat Feb 21 17:22:29.776030 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.test"] [unique_id "aZmjhftESZ8OtrhBvYu5GwAAAAg"] [Sat Feb 21 17:22:29.780910 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.docker"] [unique_id "aZmjhT1ptPcqn_sBRBem6wAAAAc"] [Sat Feb 21 17:22:29.792859 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.staging"] [unique_id "aZmjhRxmZo-HQv7YnF7D0gAAAAE"] [Sat Feb 21 17:22:29.793648 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/node/.env.production"] [unique_id "aZmjhQGCi3q8m6N5kGLZdAAAAAY"] [Sat Feb 21 17:22:29.796475 2026] [security2:error] [pid 2095811:tid 2095811] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.testing"] [unique_id "aZmjhdpGmemyPzimpI2VcQAAAAA"] [Sat Feb 21 17:22:29.802231 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/django/.env.prod"] [unique_id "aZmjhftESZ8OtrhBvYu5HAAAAAg"] [Sat Feb 21 17:22:29.813583 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.local"] [unique_id "aZmjhVAuKWjBndpBvNwOsgAAAAQ"] [Sat Feb 21 17:22:29.819713 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.dev"] [unique_id "aZmjhQGCi3q8m6N5kGLZdQAAAAY"] [Sat Feb 21 17:22:29.826127 2026] [security2:error] [pid 2095811:tid 2095811] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/app/.env"] [unique_id "aZmjhdpGmemyPzimpI2VcgAAAAA"] [Sat Feb 21 17:22:29.827862 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.old"] [unique_id "aZmjhftESZ8OtrhBvYu5HQAAAAg"] [Sat Feb 21 17:22:29.829275 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.example"] [unique_id "aZmjhRBFSwbWxfUieigxoQAAAAM"] [Sat Feb 21 17:22:29.836102 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/admin/.env"] [unique_id "aZmjhT1ptPcqn_sBRBem7QAAAAc"] [Sat Feb 21 17:22:29.838527 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.prod"] [unique_id "aZmjhVAuKWjBndpBvNwOswAAAAQ"] [Sat Feb 21 17:22:29.848586 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.save"] [unique_id "aZmjhRxmZo-HQv7YnF7D1AAAAAE"] [Sat Feb 21 17:22:29.856500 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/frontend/.env"] [unique_id "aZmjhQGCi3q8m6N5kGLZdgAAAAY"] [Sat Feb 21 17:22:29.859750 2026] [security2:error] [pid 2095811:tid 2095811] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/django/.env"] [unique_id "aZmjhdpGmemyPzimpI2VcwAAAAA"] [Sat Feb 21 17:22:29.861370 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/symfony/.env.dev"] [unique_id "aZmjhftESZ8OtrhBvYu5HgAAAAg"] [Sat Feb 21 17:22:29.873821 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.dist"] [unique_id "aZmjhT1ptPcqn_sBRBem7gAAAAc"] [Sat Feb 21 17:22:29.892661 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.backup"] [unique_id "aZmjhftESZ8OtrhBvYu5HwAAAAg"] [Sat Feb 21 17:22:29.892660 2026] [security2:error] [pid 2124035:tid 2124035] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/api/.env"] [unique_id "aZmjhaoDJThE-FC2DU3FJAAAAAk"] [Sat Feb 21 17:22:29.896029 2026] [security2:error] [pid 2119702:tid 2119702] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/public/.env"] [unique_id "aZmjhSeNEOqmT-h8XHRViwAAAAU"] [Sat Feb 21 17:22:29.896312 2026] [security2:error] [pid 2117316:tid 2117316] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/laravel/.env"] [unique_id "aZmjhT1ptPcqn_sBRBem7wAAAAc"] [Sat Feb 21 17:22:29.897329 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/wp-config.php"] [unique_id "aZmjhRBFSwbWxfUieigxowAAAAM"] [Sat Feb 21 17:22:29.898539 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.development"] [unique_id "aZmjhVAuKWjBndpBvNwOtQAAAAQ"] [Sat Feb 21 17:22:29.903796 2026] [security2:error] [pid 2121618:tid 2121618] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/node/.env"] [unique_id "aZmjhRxmZo-HQv7YnF7D1gAAAAE"] [Sat Feb 21 17:22:29.908661 2026] [security2:error] [pid 2123474:tid 2123474] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/symfony/.env"] [unique_id "aZmjhb3uIV3bsvQ7E2e_CgAAAAI"] [Sat Feb 21 17:22:29.911772 2026] [security2:error] [pid 2105506:tid 2105506] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node/.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/node/.env.development"] [unique_id "aZmjhQGCi3q8m6N5kGLZeAAAAAY"] [Sat Feb 21 17:22:29.918525 2026] [security2:error] [pid 2122965:tid 2122965] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/backend/.env"] [unique_id "aZmjhftESZ8OtrhBvYu5IAAAAAg"] [Sat Feb 21 17:22:29.922048 2026] [security2:error] [pid 2124035:tid 2124035] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZmjhaoDJThE-FC2DU3FJQAAAAk"] [Sat Feb 21 17:22:29.923762 2026] [security2:error] [pid 2118467:tid 2118467] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/html/.env"] [unique_id "aZmjhVAuKWjBndpBvNwOtgAAAAQ"] [Sat Feb 21 17:22:29.923866 2026] [security2:error] [pid 2124119:tid 2124119] [client 49.248.192.204:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.production"] [unique_id "aZmjhRBFSwbWxfUieigxpAAAAAM"] [Sat Feb 21 17:22:30.844626 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjhgGCi3q8m6N5kGLZeQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:22:30.844717 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjhgGCi3q8m6N5kGLZeQAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:22:31.873573 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjh_tESZ8OtrhBvYu5IQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:22:31.873676 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjh_tESZ8OtrhBvYu5IQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:22:35.589498 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:22:57.118650 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjoftESZ8OtrhBvYu5LAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:22:57.118784 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjoftESZ8OtrhBvYu5LAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:22:59.187337 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjo_tESZ8OtrhBvYu5LQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:22:59.187427 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjo_tESZ8OtrhBvYu5LQAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:23:04.452194 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjqBxmZo-HQv7YnF7D5wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:23:04.452297 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmjqBxmZo-HQv7YnF7D5wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:23:10.765728 2026] [security2:error] [pid 2105506:tid 2105506] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/an.php"] [unique_id "aZmjrgGCi3q8m6N5kGLZkAAAAAY"] [Sat Feb 21 17:23:10.765804 2026] [security2:error] [pid 2105506:tid 2105506] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/an.php"] [unique_id "aZmjrgGCi3q8m6N5kGLZkAAAAAY"] [Sat Feb 21 17:23:14.900561 2026] [security2:error] [pid 2122965:tid 2122965] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aZmjsvtESZ8OtrhBvYu5PgAAAAg"] [Sat Feb 21 17:23:14.900679 2026] [security2:error] [pid 2122965:tid 2122965] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aZmjsvtESZ8OtrhBvYu5PgAAAAg"] [Sat Feb 21 17:23:21.616370 2026] [security2:error] [pid 2121618:tid 2121618] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/wp-content/plugins/index.php"] [unique_id "aZmjuRxmZo-HQv7YnF7EAQAAAAE"] [Sat Feb 21 17:23:21.616432 2026] [security2:error] [pid 2121618:tid 2121618] [client 172.190.142.176:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/wp-content/plugins/index.php"] [unique_id "aZmjuRxmZo-HQv7YnF7EAQAAAAE"] [Sat Feb 21 17:23:25.480817 2026] [security2:error] [pid 2122965:tid 2122965] [client 136.243.228.182:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-global": Permission denied [hostname "www.serversvalley.com"] [uri "/cgi-sys/ea-php74/cart.php"] [unique_id "aZmjvftESZ8OtrhBvYu5TQAAAAg"] [Sat Feb 21 17:23:25.480882 2026] [security2:error] [pid 2122965:tid 2122965] [client 136.243.228.182:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/serversvalley-ip": Permission denied [hostname "www.serversvalley.com"] [uri "/cgi-sys/ea-php74/cart.php"] [unique_id "aZmjvftESZ8OtrhBvYu5TQAAAAg"] [Sat Feb 21 17:23:36.747254 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:23:48.772105 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmj1CeNEOqmT-h8XHRVxgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:23:48.772361 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmj1CeNEOqmT-h8XHRVxgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:24:22.322460 2026] [authz_core:error] [pid 2121618:tid 2121618] [client 104.211.88.54:0] AH01630: client denied by server configuration: /home/medimen/public_html/wp-content/uploads/2023/03/index.php [Sat Feb 21 17:24:24.776669 2026] [authz_core:error] [pid 2123474:tid 2123474] [client 104.211.88.54:0] AH01630: client denied by server configuration: /home/medimen/public_html/wp-content/uploads/autoload_classmap.php [Sat Feb 21 17:24:25.780473 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmj-QGCi3q8m6N5kGLZvgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:24:25.780525 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmj-QGCi3q8m6N5kGLZvgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:24:26.713809 2026] [authz_core:error] [pid 2118467:tid 2118467] [client 104.211.88.54:0] AH01630: client denied by server configuration: /home/medimen/public_html/wp-content/uploads/wp.php [Sat Feb 21 17:24:45.491448 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkDRBFSwbWxfUieigyAAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:24:45.491584 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkDRBFSwbWxfUieigyAAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:24:47.706637 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkDxxmZo-HQv7YnF7ENQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 17:24:47.706756 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkDxxmZo-HQv7YnF7ENQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 17:24:48.238814 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkEPtESZ8OtrhBvYu5eAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 17:24:48.238870 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkEPtESZ8OtrhBvYu5eAAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 17:25:00.511215 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkHNpGmemyPzimpI2VxwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 17:25:00.511388 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkHNpGmemyPzimpI2VxwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 17:25:01.960274 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 107.21.11.47:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 17:25:01.960667 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 107.21.11.47:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 17:25:01.965063 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 107.21.11.47:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 17:25:07.119655 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:25:17.039616 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkLD1ptPcqn_sBRBenVwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:25:17.039689 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkLD1ptPcqn_sBRBenVwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:25:41.532779 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkRT1ptPcqn_sBRBenYQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 17:25:41.532898 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkRT1ptPcqn_sBRBenYQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 17:25:48.198770 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkTAGCi3q8m6N5kGLZ6AAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 17:25:48.198855 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkTAGCi3q8m6N5kGLZ6AAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 17:26:10.108675 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:26:22.665287 2026] [security2:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-global": Permission denied [hostname "maktechpartners.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "aZmkbhBFSwbWxfUieigyMAAAAAM"] [Sat Feb 21 17:26:22.665391 2026] [security2:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-ip": Permission denied [hostname "maktechpartners.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "aZmkbhBFSwbWxfUieigyMAAAAAM"] [Sat Feb 21 17:26:26.135392 2026] [security2:error] [pid 2121618:tid 2121618] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-global": Permission denied [hostname "maktechpartners.com"] [uri "/reze.php"] [unique_id "aZmkchxmZo-HQv7YnF7EYQAAAAE"] [Sat Feb 21 17:26:26.135490 2026] [security2:error] [pid 2121618:tid 2121618] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/maktechpartners-ip": Permission denied [hostname "maktechpartners.com"] [uri "/reze.php"] [unique_id "aZmkchxmZo-HQv7YnF7EYQAAAAE"] [Sat Feb 21 17:26:43.804939 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkg73uIV3bsvQ7E2e_lwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:26:43.805024 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkg73uIV3bsvQ7E2e_lwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:26:54.694353 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkjtpGmemyPzimpI2WBQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:26:54.694483 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkjtpGmemyPzimpI2WBQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:27:08.243389 2026] [negotiation:error] [pid 2123474:tid 2123474] [client 52.172.248.2:0] AH00687: Negotiation: discovered file(s) matching request: /home/maktechpartners/public_html/index (None could be negotiated). [Sat Feb 21 17:27:24.637392 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkrAGCi3q8m6N5kGLaJgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:27:24.637483 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmkrAGCi3q8m6N5kGLaJgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:27:28.359411 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmksFAuKWjBndpBvNwPawAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:27:28.359499 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmksFAuKWjBndpBvNwPawAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:28:05.405544 2026] [security2:error] [pid 2124119:tid 2124119] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-global": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmk1RBFSwbWxfUieigyegAAAAM"] [Sat Feb 21 17:28:05.405670 2026] [security2:error] [pid 2124119:tid 2124119] [client 66.249.68.7:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/advertwisely-ip": Permission denied [hostname "www.advertwisely.com"] [uri "/"] [unique_id "aZmk1RBFSwbWxfUieigyegAAAAM"] [Sat Feb 21 17:28:24.926119 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmk6KoDJThE-FC2DU3F_wAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 17:28:24.926251 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmk6KoDJThE-FC2DU3F_wAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 17:28:41.347201 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:28:43.005927 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmk-tpGmemyPzimpI2WRwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 17:28:43.006031 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmk-tpGmemyPzimpI2WRwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 17:29:02.944485 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlDr3uIV3bsvQ7E2e_6gAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:29:02.944624 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlDr3uIV3bsvQ7E2e_6gAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:29:26.244170 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlJtpGmemyPzimpI2WWgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 17:29:26.244290 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlJtpGmemyPzimpI2WWgAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 17:30:06.921048 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:30:13.430263 2026] [security2:error] [pid 2123474:tid 2123474] [client 20.100.193.95:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmlVL3uIV3bsvQ7E2fACgAAAAI"] [Sat Feb 21 17:30:13.430357 2026] [security2:error] [pid 2123474:tid 2123474] [client 20.100.193.95:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmlVL3uIV3bsvQ7E2fACgAAAAI"] [Sat Feb 21 17:30:31.784743 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlZwGCi3q8m6N5kGLahQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:30:31.784822 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlZwGCi3q8m6N5kGLahQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:30:32.263449 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlaNpGmemyPzimpI2WeAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 17:30:32.263655 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlaNpGmemyPzimpI2WeAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda [Sat Feb 21 17:30:52.686142 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlfBxmZo-HQv7YnF7E9AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 17:30:52.686233 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlfBxmZo-HQv7YnF7E9AAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 17:31:09.431951 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmljb3uIV3bsvQ7E2fAIwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:31:09.432019 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmljb3uIV3bsvQ7E2fAIwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:31:10.365957 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:31:40.114824 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlrCeNEOqmT-h8XHRWuAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0 [Sat Feb 21 17:31:40.114933 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlrCeNEOqmT-h8XHRWuAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0 [Sat Feb 21 17:32:01.485530 2026] [security2:error] [pid 2124035:tid 2124035] [client 195.250.31.127:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.home.akcpa.sa"] [uri "/.env"] [unique_id "aZmlwaoDJThE-FC2DU3GXwAAAAk"] [Sat Feb 21 17:32:01.486895 2026] [core:error] [pid 2124035:tid 2124035] [client 195.250.31.127:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:32:01.486933 2026] [core:error] [pid 2124035:tid 2124035] [client 195.250.31.127:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:32:07.945786 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlxwGCi3q8m6N5kGLarAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:32:07.945920 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmlxwGCi3q8m6N5kGLarAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:32:18.727968 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:32:43.283813 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZml66oDJThE-FC2DU3GcAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:32:43.283904 2026] [security2:error] [pid 2124035:tid 2124035] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZml66oDJThE-FC2DU3GcAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:32:49.516961 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZml8b3uIV3bsvQ7E2fASwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:32:49.517058 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZml8b3uIV3bsvQ7E2fASwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:33:15.565106 2026] [security2:error] [pid 2124035:tid 2124035] [client 45.148.10.247:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "3mlittmann.us"] [uri "/.git/config"] [unique_id "aZmmC6oDJThE-FC2DU3GfQAAAAk"] [Sat Feb 21 17:33:20.568520 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmEFAuKWjBndpBvNwQEAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem [Sat Feb 21 17:33:20.568651 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmEFAuKWjBndpBvNwQEAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem [Sat Feb 21 17:34:20.861324 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:34:36.333924 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmXD1ptPcqn_sBRBeoYQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 17:34:36.334035 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmXD1ptPcqn_sBRBeoYQAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fmq%2F0 [Sat Feb 21 17:34:41.646888 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmYSeNEOqmT-h8XHRXBgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:34:41.647017 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmYSeNEOqmT-h8XHRXBgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:34:43.234135 2026] [security2:error] [pid 2160629:tid 2160629] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-global": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZmmYmV54eR_jh_j4D-1dwAAAAo"] [Sat Feb 21 17:34:43.234224 2026] [security2:error] [pid 2160629:tid 2160629] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/asalinnovations-ip": Permission denied [hostname "asalinnovations.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZmmYmV54eR_jh_j4D-1dwAAAAo"] [Sat Feb 21 17:34:44.734104 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:35:23.326050 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:35:25.404115 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmjSeNEOqmT-h8XHRXGQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fpower [Sat Feb 21 17:35:25.404220 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmjSeNEOqmT-h8XHRXGQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fpower [Sat Feb 21 17:35:28.335554 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.335643 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.725356 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.725417 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.755958 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.756035 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.786198 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.786272 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.816783 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.816907 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.846147 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.846200 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.874598 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.874646 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.905061 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.905102 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.933904 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.933962 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.965070 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.965110 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.994227 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:28.994259 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.022821 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.022868 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.055325 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.055393 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.085314 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.085365 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.085744 2026] [security2:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZmmkQGCi3q8m6N5kGLbCQAAAAY"] [Sat Feb 21 17:35:29.085809 2026] [security2:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZmmkQGCi3q8m6N5kGLbCQAAAAY"] [Sat Feb 21 17:35:29.113396 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.113449 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.142960 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.143014 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.173195 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.173323 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.221673 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.221732 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.252576 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.252653 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.316568 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.316620 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.346075 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.346127 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.375768 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.375836 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.519448 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.519487 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.549007 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.549086 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.586913 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.586946 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.615032 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.615066 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.671776 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.671831 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.700503 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.700542 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.729162 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.729196 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.758110 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.758166 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.790283 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.790347 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.832508 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.832544 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.861730 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.861812 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.898119 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.898154 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.926089 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.926123 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.954963 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.955002 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.983109 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:29.983141 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.013511 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.013599 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.042386 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.042450 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.072408 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.072474 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.109137 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.109196 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.141024 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.141083 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.169348 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.169414 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.202810 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.202865 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.231356 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.231407 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.270239 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.270288 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.299578 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.299625 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.328784 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.328862 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.365787 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.365839 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.402127 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.402185 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.437073 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.437122 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.486885 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.486931 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.534021 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.534060 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.574405 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.574451 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.603451 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.603496 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.634993 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.635046 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.664608 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.664682 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.693797 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.693841 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.722434 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.722470 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.751592 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.751641 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.780295 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.780328 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.818201 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.818251 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.849932 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.849981 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.878160 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.878191 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.906386 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.906447 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.935378 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.935428 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.964578 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:30.964625 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.014752 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.014829 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.043370 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.043419 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.084775 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.084838 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.119396 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.119453 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.148223 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.148307 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.177093 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.177144 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.207709 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.207781 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.236688 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.236751 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.266104 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.266160 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.309705 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.309740 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.960897 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.960993 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.991275 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:31.991352 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.209526 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.209573 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.210083 2026] [security2:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZmmlD1ptPcqn_sBRBeoggAAAAc"] [Sat Feb 21 17:35:32.210131 2026] [security2:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "technicaltesting.com.pk"] [uri "/index.php"] [unique_id "aZmmlD1ptPcqn_sBRBeoggAAAAc"] [Sat Feb 21 17:35:32.349278 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.349360 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.377331 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.377377 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.555223 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.555306 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.584465 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.584532 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.613632 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.613689 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.795887 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.795950 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.825322 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.825404 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.854179 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.854238 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.882043 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.882075 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.910854 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.910912 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.939485 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.939561 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.968277 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:32.968312 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.007167 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.007240 2026] [core:error] [pid 2123474:tid 2123474] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.047222 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.047294 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.075469 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.075516 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.105416 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.105483 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.134625 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.134676 2026] [core:error] [pid 2105506:tid 2105506] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.163981 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.164056 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.212239 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.212295 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.442754 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.442841 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.590635 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.590668 2026] [core:error] [pid 2121618:tid 2121618] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.618510 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.618543 2026] [core:error] [pid 2122965:tid 2122965] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.647872 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.647937 2026] [core:error] [pid 2117316:tid 2117316] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.675976 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.676022 2026] [core:error] [pid 2095811:tid 2095811] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.719135 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.719224 2026] [core:error] [pid 2124119:tid 2124119] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.748253 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.748290 2026] [core:error] [pid 2118467:tid 2118467] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.777153 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.777248 2026] [core:error] [pid 2119702:tid 2119702] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.808584 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:33.808658 2026] [core:error] [pid 2160629:tid 2160629] [client 40.112.95.11:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:35:36.300230 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmmGV54eR_jh_j4D-1mAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 17:35:36.300292 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmmGV54eR_jh_j4D-1mAAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fmq%2F0 [Sat Feb 21 17:35:42.050045 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmnRBFSwbWxfUieigzRwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:35:42.050131 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmmnRBFSwbWxfUieigzRwAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:36:15.780441 2026] [security2:error] [pid 2121618:tid 2121618] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/moshou.php"] [unique_id "aZmmvxxmZo-HQv7YnF7FigAAAAE"] [Sat Feb 21 17:36:15.780506 2026] [security2:error] [pid 2121618:tid 2121618] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/moshou.php"] [unique_id "aZmmvxxmZo-HQv7YnF7FigAAAAE"] [Sat Feb 21 17:36:23.560721 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:36:23.631754 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:36:58.545082 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm6gGCi3q8m6N5kGLbQwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:36:58.545262 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm6gGCi3q8m6N5kGLbQwAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:37:00.028928 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm6xBFSwbWxfUieigzdQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7 [Sat Feb 21 17:37:00.028988 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm6xBFSwbWxfUieigzdQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7 [Sat Feb 21 17:37:04.338595 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm8PtESZ8OtrhBvYu65gAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:37:04.338656 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm8PtESZ8OtrhBvYu65gAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:37:08.428979 2026] [security2:error] [pid 2123474:tid 2123474] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/about.php"] [unique_id "aZmm9L3uIV3bsvQ7E2fAzAAAAAI"] [Sat Feb 21 17:37:08.429037 2026] [security2:error] [pid 2123474:tid 2123474] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/about.php"] [unique_id "aZmm9L3uIV3bsvQ7E2fAzAAAAAI"] [Sat Feb 21 17:37:12.372960 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm-CeNEOqmT-h8XHRXYAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 17:37:12.373031 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm-CeNEOqmT-h8XHRXYAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fmq%2F0 [Sat Feb 21 17:37:13.483679 2026] [security2:error] [pid 2122965:tid 2122965] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZmm-ftESZ8OtrhBvYu67AAAAAg"] [Sat Feb 21 17:37:13.483731 2026] [security2:error] [pid 2122965:tid 2122965] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "www.mypractice.247reactionpower.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZmm-ftESZ8OtrhBvYu67AAAAAg"] [Sat Feb 21 17:37:15.032815 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm-vtESZ8OtrhBvYu67QAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:37:15.032906 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmm-vtESZ8OtrhBvYu67QAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:37:24.358664 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnBD1ptPcqn_sBRBeoxwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:37:24.358730 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnBD1ptPcqn_sBRBeoxwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:37:52.580180 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnINpGmemyPzimpI2XUwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:37:52.580300 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnINpGmemyPzimpI2XUwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:37:55.340944 2026] [security2:error] [pid 2117316:tid 2117316] [client 64.112.126.83:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env.dev"] [unique_id "aZmnIz1ptPcqn_sBRBeo1QAAAAc"] [Sat Feb 21 17:38:30.446533 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:38:51.268456 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnWwGCi3q8m6N5kGLbggAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0 [Sat Feb 21 17:38:51.268586 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnWwGCi3q8m6N5kGLbggAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0 [Sat Feb 21 17:38:57.009021 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnYD1ptPcqn_sBRBeo9gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fmq [Sat Feb 21 17:38:57.009109 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnYD1ptPcqn_sBRBeo9gAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fmq [Sat Feb 21 17:39:01.689747 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.209.196.145:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-global": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/xmlrpc.php"] [unique_id "aZmnZFAuKWjBndpBvNwQyQAAAAQ"] [Sat Feb 21 17:39:01.689849 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.209.196.145:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/spotlite-ip": Permission denied [hostname "spotliteworld.com"] [uri "/cgi-sys/ea-php74/xmlrpc.php"] [unique_id "aZmnZFAuKWjBndpBvNwQyQAAAAQ"] [Sat Feb 21 17:39:27.278507 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnf2V54eR_jh_j4D-2CwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:39:27.278658 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmnf2V54eR_jh_j4D-2CwAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 17:39:36.208456 2026] [proxy_fcgi:error] [pid 2123474:tid 2123474] [client 121.121.56.142:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 17:39:44.405205 2026] [security2:error] [pid 2117316:tid 2117316] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo1.247reactionpower.com"] [uri "/api/.env"] [unique_id "aZmnkD1ptPcqn_sBRBepDgAAAAc"] [Sat Feb 21 17:39:47.006389 2026] [security2:error] [pid 2160629:tid 2160629] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo1.247reactionpower.com"] [uri "/.git/config"] [unique_id "aZmnk2V54eR_jh_j4D-2FQAAAAo"] [Sat Feb 21 17:40:08.763539 2026] [security2:error] [pid 2123474:tid 2123474] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo1.247reactionpower.com"] [uri "/.env"] [unique_id "aZmnqL3uIV3bsvQ7E2fBKwAAAAI"] [Sat Feb 21 17:40:27.951635 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:27.951763 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:27.971208 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/elp.php [Sat Feb 21 17:40:27.972794 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:27.999943 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ws58.php [Sat Feb 21 17:40:28.001476 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.019840 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/vx.php [Sat Feb 21 17:40:28.021702 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.141732 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/motu.php [Sat Feb 21 17:40:28.142714 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.158970 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ckk.php [Sat Feb 21 17:40:28.160665 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.175953 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/class.php [Sat Feb 21 17:40:28.177007 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.194991 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/166.php [Sat Feb 21 17:40:28.196714 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.212288 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ww.php [Sat Feb 21 17:40:28.213342 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.228749 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-p2r3q9c8k4.php [Sat Feb 21 17:40:28.230035 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.245743 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/users.php [Sat Feb 21 17:40:28.247549 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.272708 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/0x.php [Sat Feb 21 17:40:28.274167 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.335568 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/baixy.php [Sat Feb 21 17:40:28.336974 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.404988 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/zu.php [Sat Feb 21 17:40:28.407258 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.431399 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/kbfr.php [Sat Feb 21 17:40:28.432611 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.448236 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/f35.php [Sat Feb 21 17:40:28.449850 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.579471 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/click.php [Sat Feb 21 17:40:28.580369 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.606071 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/a332.php [Sat Feb 21 17:40:28.607491 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.773506 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/bootstrap.php [Sat Feb 21 17:40:28.774798 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.867274 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/f2.php [Sat Feb 21 17:40:28.868737 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.883924 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/to.php [Sat Feb 21 17:40:28.884808 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.905453 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/inege.php [Sat Feb 21 17:40:28.907005 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.928380 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/thui.php [Sat Feb 21 17:40:28.929252 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.944284 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/8.php [Sat Feb 21 17:40:28.945519 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.962299 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/fresh3.php [Sat Feb 21 17:40:28.963660 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.964863 2026] [security2:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/fresh3.php"] [unique_id "aZmnvL3uIV3bsvQ7E2fBNwAAAAI"] [Sat Feb 21 17:40:28.964910 2026] [security2:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/fresh3.php"] [unique_id "aZmnvL3uIV3bsvQ7E2fBNwAAAAI"] [Sat Feb 21 17:40:28.980644 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/selesai.php [Sat Feb 21 17:40:28.982165 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:28.997067 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/xs.php [Sat Feb 21 17:40:28.998360 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.021909 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/maraz.php [Sat Feb 21 17:40:29.023469 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.039788 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ws66.php [Sat Feb 21 17:40:29.040977 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.059928 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/aa.php [Sat Feb 21 17:40:29.061473 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.076705 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/erty.php [Sat Feb 21 17:40:29.077577 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.118062 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/24.php [Sat Feb 21 17:40:29.119591 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.134898 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/bzjdlofz.php [Sat Feb 21 17:40:29.136566 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.151697 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sbhu.php [Sat Feb 21 17:40:29.152981 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.168615 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-blogs.php [Sat Feb 21 17:40:29.170012 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.188654 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/fetch.php [Sat Feb 21 17:40:29.190234 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.208422 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/bolt.php [Sat Feb 21 17:40:29.209509 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.224572 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/tfm.php [Sat Feb 21 17:40:29.226590 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.242660 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ak.php [Sat Feb 21 17:40:29.243843 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.286117 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-style.php [Sat Feb 21 17:40:29.287571 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.302675 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log.php [Sat Feb 21 17:40:29.303513 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.327192 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/0x0x.php [Sat Feb 21 17:40:29.328959 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.352495 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/0byte.php [Sat Feb 21 17:40:29.353898 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.518165 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/a4.php [Sat Feb 21 17:40:29.519007 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.534122 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/logs1.php [Sat Feb 21 17:40:29.535135 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.687437 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/35.php [Sat Feb 21 17:40:29.688792 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.845491 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/lanka.php [Sat Feb 21 17:40:29.846819 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.862079 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/knmt.php [Sat Feb 21 17:40:29.862893 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.877778 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ioxi.php [Sat Feb 21 17:40:29.878761 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.969992 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/lkui.php [Sat Feb 21 17:40:29.971358 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:29.993913 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/grsiuk.php [Sat Feb 21 17:40:29.995161 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.152568 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.152662 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.404847 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/Geforce.php [Sat Feb 21 17:40:30.406256 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.454920 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/easy.php [Sat Feb 21 17:40:30.456153 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.472287 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/s1.php [Sat Feb 21 17:40:30.473649 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.507377 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/cc13.php [Sat Feb 21 17:40:30.508937 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.526304 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/06.php [Sat Feb 21 17:40:30.527559 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.545981 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/t.php [Sat Feb 21 17:40:30.547397 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.563117 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/export.php [Sat Feb 21 17:40:30.564178 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.579846 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/xxw.php [Sat Feb 21 17:40:30.580922 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.596951 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/term.php [Sat Feb 21 17:40:30.598551 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.613871 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/num.php [Sat Feb 21 17:40:30.614862 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.681460 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/file.php [Sat Feb 21 17:40:30.682370 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.704186 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/403.php [Sat Feb 21 17:40:30.705630 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.729692 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ccu.php [Sat Feb 21 17:40:30.730582 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.746120 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/155.php [Sat Feb 21 17:40:30.748072 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.768340 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/xsox.php [Sat Feb 21 17:40:30.769681 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.858707 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wen.php [Sat Feb 21 17:40:30.860126 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:30.891830 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/bgymj.php [Sat Feb 21 17:40:30.893091 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.013912 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/gk.php [Sat Feb 21 17:40:31.014950 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.031749 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/zoo.php [Sat Feb 21 17:40:31.032974 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.048573 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/zxekqlxb.php [Sat Feb 21 17:40:31.049705 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.102257 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-scr1pts.php [Sat Feb 21 17:40:31.103698 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.122050 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/shlo.php [Sat Feb 21 17:40:31.123359 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.139912 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/gdn.php [Sat Feb 21 17:40:31.140830 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.169810 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/6bcwiqwj.php [Sat Feb 21 17:40:31.171051 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.220068 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/mar.php [Sat Feb 21 17:40:31.220922 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.236458 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ws69.php [Sat Feb 21 17:40:31.237860 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.360581 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/amp.php [Sat Feb 21 17:40:31.362095 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.377438 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/gettest.php [Sat Feb 21 17:40:31.378330 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.393150 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/Jcrop.php [Sat Feb 21 17:40:31.394088 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.414943 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-act.php [Sat Feb 21 17:40:31.416410 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.431700 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-link10.php [Sat Feb 21 17:40:31.433394 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.448810 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ff1.php [Sat Feb 21 17:40:31.450155 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.466690 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/lib.php [Sat Feb 21 17:40:31.468106 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.485989 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/Ov-Simple1.php [Sat Feb 21 17:40:31.487676 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.502982 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ccs.php [Sat Feb 21 17:40:31.504432 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.519463 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/mini.php [Sat Feb 21 17:40:31.520894 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.561734 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/xr.php [Sat Feb 21 17:40:31.563154 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.589717 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/rtx.php [Sat Feb 21 17:40:31.591023 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.608131 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/666.php [Sat Feb 21 17:40:31.609577 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.624518 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/h2a2ck.php [Sat Feb 21 17:40:31.625382 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.640566 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/cytyr.php [Sat Feb 21 17:40:31.641998 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.658242 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/h02ugyh.php [Sat Feb 21 17:40:31.659496 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.679849 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/66.php [Sat Feb 21 17:40:31.680927 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.699629 2026] [access_compat:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/init.php [Sat Feb 21 17:40:31.700492 2026] [core:error] [pid 2124119:tid 2124119] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.715518 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ava.php [Sat Feb 21 17:40:31.716393 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.731489 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/inc.php [Sat Feb 21 17:40:31.733000 2026] [core:error] [pid 2095811:tid 2095811] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.748358 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ws68.php [Sat Feb 21 17:40:31.749768 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.770719 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/w1px.php [Sat Feb 21 17:40:31.772230 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.787722 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ms.php [Sat Feb 21 17:40:31.789146 2026] [core:error] [pid 2117316:tid 2117316] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.804455 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/asax.php [Sat Feb 21 17:40:31.805694 2026] [core:error] [pid 2123474:tid 2123474] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.835640 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/galer.php [Sat Feb 21 17:40:31.837079 2026] [core:error] [pid 2118467:tid 2118467] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.853058 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/fs.php [Sat Feb 21 17:40:31.854653 2026] [core:error] [pid 2160629:tid 2160629] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.891673 2026] [access_compat:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/browse.php [Sat Feb 21 17:40:31.893145 2026] [core:error] [pid 2105506:tid 2105506] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.912285 2026] [access_compat:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/aaa.php [Sat Feb 21 17:40:31.913734 2026] [core:error] [pid 2119702:tid 2119702] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:31.991998 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/global.php [Sat Feb 21 17:40:31.993407 2026] [core:error] [pid 2122965:tid 2122965] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:40:32.009579 2026] [access_compat:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/R57.php [Sat Feb 21 17:40:32.010455 2026] [core:error] [pid 2121618:tid 2121618] [client 172.213.16.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:41:05.618285 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmn4SeNEOqmT-h8XHRX3AAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:41:05.618381 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmn4SeNEOqmT-h8XHRX3AAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:41:31.547397 2026] [security2:error] [pid 2105506:tid 2105506] [client 182.48.76.130:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/xmlrpc.php"] [unique_id "aZmn-QGCi3q8m6N5kGLb1gAAAAY"] [Sat Feb 21 17:41:31.547476 2026] [security2:error] [pid 2105506:tid 2105506] [client 182.48.76.130:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/xmlrpc.php"] [unique_id "aZmn-QGCi3q8m6N5kGLb1gAAAAY"] [Sat Feb 21 17:41:37.422940 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:41:49.728356 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoDRBFSwbWxfUieig0DwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:41:49.728417 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoDRBFSwbWxfUieig0DwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:42:00.698234 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoGPtESZ8OtrhBvYu7iQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:42:00.698331 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoGPtESZ8OtrhBvYu7iQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:42:01.927334 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoGSeNEOqmT-h8XHRX9gAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem [Sat Feb 21 17:42:01.927448 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoGSeNEOqmT-h8XHRX9gAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem [Sat Feb 21 17:42:09.188178 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoISeNEOqmT-h8XHRX-QAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:42:09.188275 2026] [security2:error] [pid 2119702:tid 2119702] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoISeNEOqmT-h8XHRX-QAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:42:37.499582 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoPb3uIV3bsvQ7E2fBeQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:42:37.499649 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoPb3uIV3bsvQ7E2fBeQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:42:50.583279 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:43:06.256399 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoWhxmZo-HQv7YnF7GcAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:43:06.256504 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoWhxmZo-HQv7YnF7GcAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:43:23.525748 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoa1AuKWjBndpBvNwRUgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3 [Sat Feb 21 17:43:23.525817 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmoa1AuKWjBndpBvNwRUgAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3 [Sat Feb 21 17:43:26.656856 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmobvtESZ8OtrhBvYu7tgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:43:26.656916 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmobvtESZ8OtrhBvYu7tgAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop1%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:43:59.704969 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:44:33.456131 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmosVAuKWjBndpBvNwRewAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:44:33.456251 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmosVAuKWjBndpBvNwRewAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:44:43.389851 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:44:51.695535 2026] [security2:error] [pid 2164995:tid 2164995] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmow5gazZecvzJINvZ5fgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 17:44:51.695797 2026] [security2:error] [pid 2164995:tid 2164995] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmow5gazZecvzJINvZ5fgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 17:45:00.175980 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmozAGCi3q8m6N5kGLcOAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 17:45:00.176053 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmozAGCi3q8m6N5kGLcOAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 17:45:04.580200 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo0GV54eR_jh_j4D-2swAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:45:04.580304 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo0GV54eR_jh_j4D-2swAAAAo"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:45:11.161454 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo1_tESZ8OtrhBvYu76wAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 17:45:11.161562 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo1_tESZ8OtrhBvYu76wAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 17:45:29.239148 2026] [security2:error] [pid 2124119:tid 2124119] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmo5xBFSwbWxfUieig0dgAAAAM"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:45:29.239273 2026] [security2:error] [pid 2124119:tid 2124119] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmo5xBFSwbWxfUieig0dgAAAAM"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:45:29.882835 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:45:30.295942 2026] [access_compat:error] [pid 2117316:tid 2117316] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:45:33.850608 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo7VAuKWjBndpBvNwRmgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:45:33.850724 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo7VAuKWjBndpBvNwRmgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 17:45:38.616332 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo8lAuKWjBndpBvNwRnQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6 [Sat Feb 21 17:45:38.616440 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmo8lAuKWjBndpBvNwRnQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6 [Sat Feb 21 17:45:55.350595 2026] [security2:error] [pid 2095811:tid 2095811] [client 114.119.132.70:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within REQUEST_COOKIES:rfqtk_wp_session_a26785922b3516fe627bab9726c66e43: f1f46eae5a72ba04712f57083d14ab81||1774269952||1774377952"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "spotliteworld.com"] [uri "/product-category/jacket/textile/winter/"] [unique_id "aZmpA9pGmemyPzimpI2YRQAAAAA"], referer: https://spotliteworld.com/product/rinus [Sat Feb 21 17:46:01.058165 2026] [security2:error] [pid 2121618:tid 2121618] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmpCRxmZo-HQv7YnF7GwwAAAAE"] [Sat Feb 21 17:46:04.456524 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.456621 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.476672 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.476742 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.496535 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.496605 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.518775 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.518831 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.538733 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.538800 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.564139 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.564205 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.585441 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.585503 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.604736 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.604767 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.623909 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.623988 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.644246 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.644307 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.669743 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.669792 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.690355 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.690448 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.724733 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.724777 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.747765 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.747825 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.768364 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.768414 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.794921 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.794968 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.814412 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.814462 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.892645 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.892691 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.912324 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.912400 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.931507 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.931551 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.952530 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.952576 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.972009 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:04.977147 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.000741 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.000776 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.020113 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.020168 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.041394 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.041449 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.100480 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.100539 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.127522 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.127608 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.149799 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.149860 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.193522 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.193589 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.214502 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.214546 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.242610 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.242646 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.262415 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.262489 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.281406 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.281439 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.300804 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.300845 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.320499 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.320538 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.341588 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.341638 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.361591 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.361634 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.381239 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.381312 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.400768 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.400831 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.421445 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.421501 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.441086 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.441132 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.467878 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.467925 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.498780 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.498817 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.518176 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.518224 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.537925 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.537976 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.558561 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.558620 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.592412 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.592461 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.639849 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.639905 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.660291 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.660338 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.679734 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.679768 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.698721 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.698779 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.726514 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.726549 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.744894 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.744928 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.767322 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.767377 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.787306 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.787347 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.813882 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.813939 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.834229 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.834301 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.854975 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.855026 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.875210 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.875304 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.899096 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.899128 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.926342 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.926379 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.945640 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.945687 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.973711 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:05.973758 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.029640 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.029707 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.251026 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.251109 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.273153 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.273485 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.292585 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.292643 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.350488 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.350567 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.372012 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.372122 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.548906 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.548959 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.594643 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.594691 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.614372 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.614412 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.634316 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.634405 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.655666 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.655732 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.692309 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.692393 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.730217 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.730408 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.750465 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.750523 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.771200 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.771248 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.791932 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.791975 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.812351 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.812401 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.832480 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.832524 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.912686 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.912732 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.957044 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.957095 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.984737 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:06.984821 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.005434 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.005507 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.029890 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.029944 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.051883 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.051942 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.073991 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.074057 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.315830 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.315901 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.335331 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.335380 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.355941 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.355987 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.375376 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.375498 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.394624 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.394734 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.413722 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.413764 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.432714 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.432748 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.457888 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.457977 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.523973 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.524025 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.542399 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.542435 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.562048 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.562095 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.587112 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.587226 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.676648 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.676691 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.696584 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.696628 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.804766 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.804803 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.870051 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.870098 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.890168 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.890208 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.932842 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.932900 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.955847 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.955904 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.974994 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.975028 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.994543 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:07.994595 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.013760 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.013812 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.057163 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.057265 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.077826 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.077888 2026] [core:error] [pid 2124119:tid 2124119] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.099454 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.099530 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.120484 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.120574 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.140469 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.140522 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.160625 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.160690 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.236288 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.236339 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.255760 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.255805 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.274969 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.275039 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.400855 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.400892 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.419701 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.419731 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.463530 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.463572 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.646180 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.646228 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.669255 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.669311 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.689443 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.689486 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.708855 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.708899 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.782538 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.782611 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.807469 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.807510 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.878472 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.878515 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.930153 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.930225 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.949781 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.949828 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.979589 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:08.979751 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.000144 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.000231 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.019108 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.019188 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.039425 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.039502 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.061886 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.061930 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.083739 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.083781 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.102200 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.102243 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.123039 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.123097 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.157968 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.158023 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.182580 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.182666 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.201739 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.201771 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.221265 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.221337 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.221932 2026] [security2:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-global": Permission denied [hostname "www.technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmpEftESZ8OtrhBvYu8EQAAAAg"] [Sat Feb 21 17:46:09.221972 2026] [security2:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/technicaltesting-ip": Permission denied [hostname "www.technicaltesting.technicaltesting.pk"] [uri "/index.php"] [unique_id "aZmpEftESZ8OtrhBvYu8EQAAAAg"] [Sat Feb 21 17:46:09.243306 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.243365 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.262692 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.262735 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.416349 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.416404 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.435363 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.435465 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.458018 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.458065 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.477729 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.477783 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.497747 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.497785 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.516943 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.516991 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.535749 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.535792 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.600074 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.600137 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.638519 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.638551 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.663380 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.663411 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.687097 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.687141 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.710095 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.710147 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.729061 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.729092 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.747918 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.747962 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.785101 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.785146 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.804541 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.804586 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.822364 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.822397 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.840897 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.840931 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.859168 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.859201 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.883933 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.883974 2026] [core:error] [pid 2105506:tid 2105506] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.901706 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.901760 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.920543 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.920583 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.945792 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.945836 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.965261 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:09.965313 2026] [core:error] [pid 2117316:tid 2117316] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.000386 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.000438 2026] [core:error] [pid 2123474:tid 2123474] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.020081 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.020158 2026] [core:error] [pid 2164995:tid 2164995] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.039298 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.039352 2026] [core:error] [pid 2160629:tid 2160629] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.059249 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.059323 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.078790 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.078848 2026] [core:error] [pid 2122965:tid 2122965] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.097882 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.097926 2026] [core:error] [pid 2121618:tid 2121618] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.116592 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:10.116657 2026] [core:error] [pid 2095811:tid 2095811] [client 20.111.62.157:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 17:46:18.002269 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpGVAuKWjBndpBvNwRvgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:46:18.002401 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpGVAuKWjBndpBvNwRvgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:46:19.060063 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpGhBFSwbWxfUieig0mwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:46:19.060920 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpGhBFSwbWxfUieig0mwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:46:25.800970 2026] [security2:error] [pid 2105506:tid 2105506] [client 44.211.176.228:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-global": Permission denied [hostname "medimage.com.pk"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css"] [unique_id "aZmpIQGCi3q8m6N5kGLcewAAAAY"], referer: https://medimage.com.pk/ [Sat Feb 21 17:46:25.801037 2026] [security2:error] [pid 2105506:tid 2105506] [client 44.211.176.228:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimage-ip": Permission denied [hostname "medimage.com.pk"] [uri "/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css"] [unique_id "aZmpIQGCi3q8m6N5kGLcewAAAAY"], referer: https://medimage.com.pk/ [Sat Feb 21 17:46:36.821885 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpLL3uIV3bsvQ7E2fCFAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:46:36.821949 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpLL3uIV3bsvQ7E2fCFAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:46:43.675765 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpMxBFSwbWxfUieig0tAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 17:46:43.675876 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpMxBFSwbWxfUieig0tAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 17:46:52.606654 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpPD1ptPcqn_sBRBep-AAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:46:52.606745 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpPD1ptPcqn_sBRBep-AAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:47:03.193321 2026] [security2:error] [pid 2124119:tid 2124119] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmpRRBFSwbWxfUieig0vQAAAAM"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:47:03.193417 2026] [security2:error] [pid 2124119:tid 2124119] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmpRRBFSwbWxfUieig0vQAAAAM"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:47:13.242924 2026] [security2:error] [pid 2164995:tid 2164995] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/api/.env"] [unique_id "aZmpUZgazZecvzJINvZ54wAAAAk"] [Sat Feb 21 17:47:13.454447 2026] [security2:error] [pid 2160629:tid 2160629] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.env"] [unique_id "aZmpUWV54eR_jh_j4D-3FAAAAAo"] [Sat Feb 21 17:47:14.563771 2026] [security2:error] [pid 2095811:tid 2095811] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.git/config"] [unique_id "aZmpUtpGmemyPzimpI2YiAAAAAA"] [Sat Feb 21 17:47:30.839621 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpYlAuKWjBndpBvNwR3wAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 17:47:30.839711 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpYlAuKWjBndpBvNwR3wAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 17:47:34.603528 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:47:57.184379 2026] [security2:error] [pid 2117316:tid 2117316] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmpez1ptPcqn_sBRBeqGAAAAAc"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:47:57.184481 2026] [security2:error] [pid 2117316:tid 2117316] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmpez1ptPcqn_sBRBeqGAAAAAc"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:48:01.006047 2026] [security2:error] [pid 2122965:tid 2122965] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZmpgftESZ8OtrhBvYu8WwAAAAg"] [Sat Feb 21 17:48:22.364747 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpltpGmemyPzimpI2YrAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2 [Sat Feb 21 17:48:22.364926 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpltpGmemyPzimpI2YrAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop2 [Sat Feb 21 17:48:24.101243 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpmAGCi3q8m6N5kGLcvQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:48:24.101417 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpmAGCi3q8m6N5kGLcvQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:48:34.051827 2026] [security2:error] [pid 2124119:tid 2124119] [client 52.169.119.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-global": Permission denied [hostname "akcpa.sa"] [uri "/sidfile.php"] [unique_id "aZmpohBFSwbWxfUieig06QAAAAM"] [Sat Feb 21 17:48:34.051910 2026] [security2:error] [pid 2124119:tid 2124119] [client 52.169.119.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-ip": Permission denied [hostname "akcpa.sa"] [uri "/sidfile.php"] [unique_id "aZmpohBFSwbWxfUieig06QAAAAM"] [Sat Feb 21 17:48:38.557416 2026] [security2:error] [pid 2105506:tid 2105506] [client 52.169.119.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-global": Permission denied [hostname "akcpa.sa"] [uri "/cgi-sys/ea-php83/server.php"] [unique_id "aZmppQGCi3q8m6N5kGLcxgAAAAY"] [Sat Feb 21 17:48:38.557529 2026] [security2:error] [pid 2105506:tid 2105506] [client 52.169.119.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/akcpa-ip": Permission denied [hostname "akcpa.sa"] [uri "/cgi-sys/ea-php83/server.php"] [unique_id "aZmppQGCi3q8m6N5kGLcxgAAAAY"] [Sat Feb 21 17:48:48.018826 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmprwGCi3q8m6N5kGLczgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 17:48:48.018945 2026] [security2:error] [pid 2105506:tid 2105506] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmprwGCi3q8m6N5kGLczgAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 17:48:48.547498 2026] [security2:error] [pid 2118467:tid 2118467] [client 114.119.138.250:0] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within REQUEST_COOKIES:rfqtk_wp_session_a26785922b3516fe627bab9726c66e43: ef7dd27fd434e844f11cf08d597768d7||1774270125||1774378125"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "spotliteworld.com"] [uri "/contact-us-2/"] [unique_id "aZmpsFAuKWjBndpBvNwSDgAAAAQ"], referer: https://spotliteworld.com/product/winter-gloves-2 [Sat Feb 21 17:48:56.426556 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpuGV54eR_jh_j4D-3TwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop0 [Sat Feb 21 17:48:56.426632 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmpuGV54eR_jh_j4D-3TwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop0 [Sat Feb 21 17:49:03.280604 2026] [security2:error] [pid 2124119:tid 2124119] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZmpvxBFSwbWxfUieig0_AAAAAM"] [Sat Feb 21 17:49:12.387180 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:49:25.271033 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp1RBFSwbWxfUieig1BwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 17:49:25.271113 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp1RBFSwbWxfUieig1BwAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 17:49:37.925659 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp4a4igNZqZ6eKtslPpQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 17:49:37.925767 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp4a4igNZqZ6eKtslPpQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 17:49:38.378234 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp4mV54eR_jh_j4D-3YwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop2 [Sat Feb 21 17:49:38.378315 2026] [security2:error] [pid 2160629:tid 2160629] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp4mV54eR_jh_j4D-3YwAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop2 [Sat Feb 21 17:49:52.433619 2026] [security2:error] [pid 2121618:tid 2121618] [client 45.155.68.139:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "3mlittmann.us"] [uri "/.env"] [unique_id "aZmp8BxmZo-HQv7YnF7HUwAAAAE"] [Sat Feb 21 17:49:52.612207 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp8NpGmemyPzimpI2Y3wAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:49:52.612298 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmp8NpGmemyPzimpI2Y3wAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:50:08.533481 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqAL3uIV3bsvQ7E2fCfwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop2 [Sat Feb 21 17:50:08.533573 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqAL3uIV3bsvQ7E2fCfwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda1%2Fsubsystem%2Floop2 [Sat Feb 21 17:50:28.519789 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:50:44.255968 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqJFAuKWjBndpBvNwSQwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:50:44.256065 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqJFAuKWjBndpBvNwSQwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:51:26.825577 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:51:28.104763 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqUBBFSwbWxfUieig1QQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fpower [Sat Feb 21 17:51:28.104851 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqUBBFSwbWxfUieig1QQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fpower [Sat Feb 21 17:51:30.643396 2026] [cgi:error] [pid 2095811:tid 2095811] [client 20.207.201.18:0] AH02812: stderr from /home/brightbaby/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 17:51:33.814182 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqVRxmZo-HQv7YnF7HiQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop1 [Sat Feb 21 17:51:33.814259 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqVRxmZo-HQv7YnF7HiQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda3%2Fsubsystem%2Floop1 [Sat Feb 21 17:51:40.230351 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqXPtESZ8OtrhBvYu80AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 17:51:40.230448 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqXPtESZ8OtrhBvYu80AAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 17:51:44.844784 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:51:48.649117 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:51:51.909184 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqZ64igNZqZ6eKtslP5wAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:51:51.909260 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqZ64igNZqZ6eKtslP5wAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 17:52:21.258065 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqhb3uIV3bsvQ7E2fCvAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:52:21.258190 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqhb3uIV3bsvQ7E2fCvAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 17:52:21.487102 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqhRxmZo-HQv7YnF7HoAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:52:21.487161 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqhRxmZo-HQv7YnF7HoAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:52:24.284489 2026] [security2:error] [pid 2167082:tid 2167082] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmqiK4igNZqZ6eKtslP9QAAAAU"] [Sat Feb 21 17:52:34.412620 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqkhxmZo-HQv7YnF7HogAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 17:52:34.412699 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqkhxmZo-HQv7YnF7HogAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Fsda%2Fsda2%2Fsubsystem%2Floop1 [Sat Feb 21 17:52:59.295958 2026] [security2:error] [pid 2164995:tid 2164995] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqq5gazZecvzJINvZ6jAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:52:59.296146 2026] [security2:error] [pid 2164995:tid 2164995] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmqq5gazZecvzJINvZ6jAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:52:59.829915 2026] [security2:error] [pid 2123474:tid 2123474] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmqqr3uIV3bsvQ7E2fCzwAAAAI"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:52:59.829973 2026] [security2:error] [pid 2123474:tid 2123474] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmqqr3uIV3bsvQ7E2fCzwAAAAI"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:53:09.896671 2026] [security2:error] [pid 2095811:tid 2095811] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.20"] [uri "/.env"] [unique_id "aZmqtdpGmemyPzimpI2ZQgAAAAA"] [Sat Feb 21 17:53:24.022238 2026] [security2:error] [pid 2118467:tid 2118467] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmqxFAuKWjBndpBvNwSlAAAAAQ"] [Sat Feb 21 17:53:38.189248 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq0j1ptPcqn_sBRBeqwQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:53:38.189350 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq0j1ptPcqn_sBRBeqwQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:53:46.882128 2026] [security2:error] [pid 2160629:tid 2160629] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-cron.php"] [unique_id "aZmq2WV54eR_jh_j4D-34QAAAAo"], referer: https://alliancechem-eng.com/wp-cron.php?doing_wp_cron=1771678425.6763620376586914062500 [Sat Feb 21 17:53:46.882220 2026] [security2:error] [pid 2160629:tid 2160629] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-cron.php"] [unique_id "aZmq2WV54eR_jh_j4D-34QAAAAo"], referer: https://alliancechem-eng.com/wp-cron.php?doing_wp_cron=1771678425.6763620376586914062500 [Sat Feb 21 17:53:49.220120 2026] [security2:error] [pid 2164995:tid 2164995] [client 45.83.31.38:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "37.60.246.33"] [uri "/.env"] [unique_id "aZmq3ZgazZecvzJINvZ6qAAAAAk"] [Sat Feb 21 17:53:53.326845 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq4T1ptPcqn_sBRBeq0AAAAAc"] [Sat Feb 21 17:53:53.326905 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq4T1ptPcqn_sBRBeq0AAAAAc"] [Sat Feb 21 17:53:54.498368 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq4j1ptPcqn_sBRBeq0gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:53:54.498442 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq4j1ptPcqn_sBRBeq0gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:53:54.805373 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq4tpGmemyPzimpI2ZXgAAAAA"] [Sat Feb 21 17:53:54.805467 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq4tpGmemyPzimpI2ZXgAAAAA"] [Sat Feb 21 17:53:56.339689 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq5BxmZo-HQv7YnF7H1QAAAAE"] [Sat Feb 21 17:53:56.339814 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq5BxmZo-HQv7YnF7H1QAAAAE"] [Sat Feb 21 17:53:58.827329 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq5mV54eR_jh_j4D-39AAAAAo"] [Sat Feb 21 17:53:58.827394 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq5mV54eR_jh_j4D-39AAAAAo"] [Sat Feb 21 17:54:11.916653 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:54:11.949518 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:54:15.070416 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq9q4igNZqZ6eKtslQSAAAAAU"] [Sat Feb 21 17:54:15.070515 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmq9q4igNZqZ6eKtslQSAAAAAU"] [Sat Feb 21 17:54:15.996162 2026] [access_compat:error] [pid 2170028:tid 2170028] [client 80.94.95.202:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php, referer: https://rentacarkarachi.com/ [Sat Feb 21 17:54:24.389467 2026] [security2:error] [pid 2122965:tid 2122965] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmq__tESZ8OtrhBvYu9RQAAAAg"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:54:24.389536 2026] [security2:error] [pid 2122965:tid 2122965] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmq__tESZ8OtrhBvYu9RQAAAAg"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:54:24.436041 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrAD1ptPcqn_sBRBeq_QAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:54:24.436120 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrAD1ptPcqn_sBRBeq_QAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4 [Sat Feb 21 17:54:37.152142 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrDL3uIV3bsvQ7E2fDMQAAAAI"] [Sat Feb 21 17:54:37.152205 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrDL3uIV3bsvQ7E2fDMQAAAAI"] [Sat Feb 21 17:54:42.907028 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrEv_5kngxRGoMXipKIwAAAAY"] [Sat Feb 21 17:54:42.907154 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrEv_5kngxRGoMXipKIwAAAAY"] [Sat Feb 21 17:54:54.118092 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrHq4igNZqZ6eKtslQfwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:54:54.118204 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrHq4igNZqZ6eKtslQfwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 17:55:01.292912 2026] [security2:error] [pid 2164995:tid 2164995] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrJZgazZecvzJINvZ7GAAAAAk"] [Sat Feb 21 17:55:01.292980 2026] [security2:error] [pid 2164995:tid 2164995] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrJZgazZecvzJINvZ7GAAAAAk"] [Sat Feb 21 17:55:08.265285 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrLD1ptPcqn_sBRBerOgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:55:08.265378 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrLD1ptPcqn_sBRBerOgAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop6%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:55:18.244262 2026] [security2:error] [pid 2170028:tid 2170028] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrNv_5kngxRGoMXipKVAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:55:18.244370 2026] [security2:error] [pid 2170028:tid 2170028] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrNv_5kngxRGoMXipKVAAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2 [Sat Feb 21 17:55:19.107428 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrNxxmZo-HQv7YnF7ISQAAAAE"] [Sat Feb 21 17:55:19.107517 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrNxxmZo-HQv7YnF7ISQAAAAE"] [Sat Feb 21 17:55:21.910025 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrOVAuKWjBndpBvNwTMAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:55:21.910105 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrOVAuKWjBndpBvNwTMAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1 [Sat Feb 21 17:55:27.740264 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrPxBFSwbWxfUieig2EQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:55:27.740326 2026] [security2:error] [pid 2124119:tid 2124119] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrPxBFSwbWxfUieig2EQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A5 [Sat Feb 21 17:55:32.095023 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrRP_5kngxRGoMXipKaQAAAAY"] [Sat Feb 21 17:55:37.287564 2026] [security2:error] [pid 2164995:tid 2164995] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrSZgazZecvzJINvZ7SwAAAAk"] [Sat Feb 21 17:55:40.378921 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/apt/apt.conf" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt/apt.conf found within ARGS:path: /etc/apt/apt.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrTK4igNZqZ6eKtslQugAAAAU"] [Sat Feb 21 17:55:41.110559 2026] [security2:error] [pid 2164995:tid 2164995] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrTZgazZecvzJINvZ7UQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem [Sat Feb 21 17:55:41.110618 2026] [security2:error] [pid 2164995:tid 2164995] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrTZgazZecvzJINvZ7UQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem [Sat Feb 21 17:55:43.677586 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrT73uIV3bsvQ7E2fDkwAAAAI"] [Sat Feb 21 17:55:43.677721 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrT73uIV3bsvQ7E2fDkwAAAAI"] [Sat Feb 21 17:55:45.204167 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrUftESZ8OtrhBvYu9vAAAAAg"] [Sat Feb 21 17:55:46.824893 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrUj1ptPcqn_sBRBercQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:55:46.824996 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrUj1ptPcqn_sBRBercQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7 [Sat Feb 21 17:55:49.565443 2026] [access_compat:error] [pid 2095811:tid 2095811] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:55:49.757947 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrVT1ptPcqn_sBRBerdgAAAAc"] [Sat Feb 21 17:55:49.758019 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrVT1ptPcqn_sBRBerdgAAAAc"] [Sat Feb 21 17:55:51.572167 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrV9pGmemyPzimpI2aBgAAAAA"] [Sat Feb 21 17:55:51.572261 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrV9pGmemyPzimpI2aBgAAAAA"] [Sat Feb 21 17:56:01.568172 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrYT1ptPcqn_sBRBerhwAAAAc"] [Sat Feb 21 17:56:01.915359 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 20.210.88.198:0] AH01797: client denied by server configuration: /home/vascardmedical/public_html/wp-content/uploads/wc-logs/ [Sat Feb 21 17:56:01.920444 2026] [access_compat:error] [pid 2160629:tid 2160629] [client 20.210.88.198:0] AH01797: client denied by server configuration: /home/vascardmedical/public_html/wp-content/uploads/woocommerce_uploads/ [Sat Feb 21 17:56:04.239314 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrZBxmZo-HQv7YnF7IkgAAAAE"] [Sat Feb 21 17:56:04.239423 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrZBxmZo-HQv7YnF7IkgAAAAE"] [Sat Feb 21 17:56:13.051986 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrbPtESZ8OtrhBvYu94gAAAAg"] [Sat Feb 21 17:56:13.052090 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrbPtESZ8OtrhBvYu94gAAAAg"] [Sat Feb 21 17:56:14.142282 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:56:17.572841 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrcb3uIV3bsvQ7E2fDvwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 17:56:17.572943 2026] [security2:error] [pid 2123474:tid 2123474] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrcb3uIV3bsvQ7E2fDvwAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 17:56:19.326136 2026] [cgi:error] [pid 2172634:tid 2172634] [client 20.210.88.198:0] AH02812: stderr from /home/vascardmedical/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 17:56:24.050275 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrd73uIV3bsvQ7E2fDyQAAAAI"] [Sat Feb 21 17:56:24.050365 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrd73uIV3bsvQ7E2fDyQAAAAI"] [Sat Feb 21 17:56:29.796960 2026] [access_compat:error] [pid 2123474:tid 2123474] [client 160.153.192.165:0] AH01797: client denied by server configuration: /home/protecprtmybills/public_html/wp-content/themes/havnor/inc/dynamic-style.php, referer: https://protectmybills.uk/ [Sat Feb 21 17:56:31.159661 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrf1AuKWjBndpBvNwTlAAAAAQ"] [Sat Feb 21 17:56:51.070846 2026] [security2:error] [pid 2121618:tid 2121618] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmrkRxmZo-HQv7YnF7I2gAAAAE"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:56:51.070933 2026] [security2:error] [pid 2121618:tid 2121618] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmrkRxmZo-HQv7YnF7I2gAAAAE"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:56:52.258023 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrlBxmZo-HQv7YnF7I3AAAAAE"] [Sat Feb 21 17:56:52.258115 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrlBxmZo-HQv7YnF7I3AAAAAE"] [Sat Feb 21 17:56:53.713874 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrlZpe9KOFdAtIQx5i7gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 17:56:53.713954 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrlZpe9KOFdAtIQx5i7gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 17:56:56.019558 2026] [authz_core:error] [pid 2095811:tid 2095811] [client 20.210.88.198:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/customize/error_log [Sat Feb 21 17:56:59.153553 2026] [security2:error] [pid 2122965:tid 2122965] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmrmftESZ8OtrhBvYu-HwAAAAg"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:56:59.153614 2026] [security2:error] [pid 2122965:tid 2122965] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmrmftESZ8OtrhBvYu-HwAAAAg"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:57:01.915035 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrnf_5kngxRGoMXipK7wAAAAY"] [Sat Feb 21 17:57:08.197031 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrpD1ptPcqn_sBRBer7QAAAAc"] [Sat Feb 21 17:57:08.197090 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrpD1ptPcqn_sBRBer7QAAAAc"] [Sat Feb 21 17:57:09.129148 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrpb3uIV3bsvQ7E2fECAAAAAI"] [Sat Feb 21 17:57:09.129234 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrpb3uIV3bsvQ7E2fECAAAAAI"] [Sat Feb 21 17:57:09.471945 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrpf_5kngxRGoMXipK-wAAAAY"] [Sat Feb 21 17:57:09.472001 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrpf_5kngxRGoMXipK-wAAAAY"] [Sat Feb 21 17:57:10.591737 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrplAuKWjBndpBvNwTxgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:57:10.591809 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrplAuKWjBndpBvNwTxgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:57:15.670544 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrq__5kngxRGoMXipLBgAAAAY"] [Sat Feb 21 17:57:15.670599 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrq__5kngxRGoMXipLBgAAAAY"] [Sat Feb 21 17:57:18.019611 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrrZpe9KOFdAtIQx5jCAAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:57:18.019700 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrrZpe9KOFdAtIQx5jCAAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6 [Sat Feb 21 17:57:18.448449 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrrlAuKWjBndpBvNwT0QAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0 [Sat Feb 21 17:57:18.448531 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrrlAuKWjBndpBvNwT0QAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0 [Sat Feb 21 17:57:18.904807 2026] [access_compat:error] [pid 2122965:tid 2122965] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:57:19.268844 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrr2V54eR_jh_j4D-5DAAAAAo"] [Sat Feb 21 17:57:19.268904 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrr2V54eR_jh_j4D-5DAAAAAo"] [Sat Feb 21 17:57:19.505556 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrr5pe9KOFdAtIQx5jCwAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2Fhost0 [Sat Feb 21 17:57:19.505632 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrr5pe9KOFdAtIQx5jCwAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2Fhost0 [Sat Feb 21 17:57:19.537978 2026] [authz_core:error] [pid 2172467:tid 2172467] [client 20.210.88.198:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-admin/maint/error_log [Sat Feb 21 17:57:21.562600 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrsa4igNZqZ6eKtslRQAAAAAU"] [Sat Feb 21 17:57:21.562683 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrsa4igNZqZ6eKtslRQAAAAAU"] [Sat Feb 21 17:57:23.546122 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrs_tESZ8OtrhBvYu-QAAAAAg"] [Sat Feb 21 17:57:23.546259 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrs_tESZ8OtrhBvYu-QAAAAAg"] [Sat Feb 21 17:57:27.361334 2026] [authz_core:error] [pid 2122965:tid 2122965] [client 20.210.88.198:0] AH01630: client denied by server configuration: /home/vascardmedical/public_html/wp-includes/pomo/error_log [Sat Feb 21 17:57:32.392420 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrvL3uIV3bsvQ7E2fEJAAAAAI"] [Sat Feb 21 17:57:35.947046 2026] [security2:error] [pid 2123474:tid 2123474] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrv73uIV3bsvQ7E2fEKAAAAAI"] [Sat Feb 21 17:57:36.613901 2026] [security2:error] [pid 2123474:tid 2123474] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.bak"] [unique_id "aZmrwL3uIV3bsvQ7E2fEKQAAAAI"] [Sat Feb 21 17:57:37.332623 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.bak"] [unique_id "aZmrwZpe9KOFdAtIQx5jJQAAAAw"] [Sat Feb 21 17:57:38.455958 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env"] [unique_id "aZmrwhxmZo-HQv7YnF7JHwAAAAE"] [Sat Feb 21 17:57:39.148786 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env"] [unique_id "aZmrw64igNZqZ6eKtslRWAAAAAU"] [Sat Feb 21 17:57:39.406604 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmrwxBFSwbWxfUieig21gAAAAM"] [Sat Feb 21 17:57:40.233086 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.backup"] [unique_id "aZmrxJpe9KOFdAtIQx5jKAAAAAw"] [Sat Feb 21 17:57:40.967435 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.backup"] [unique_id "aZmrxGV54eR_jh_j4D-5KgAAAAo"] [Sat Feb 21 17:57:41.982707 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_sample"] [unique_id "aZmrxf_5kngxRGoMXipLJwAAAAY"] [Sat Feb 21 17:57:42.750650 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_sample"] [unique_id "aZmrxhBFSwbWxfUieig22gAAAAM"] [Sat Feb 21 17:57:43.960092 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.old"] [unique_id "aZmrx1AuKWjBndpBvNwT8wAAAAQ"] [Sat Feb 21 17:57:44.696430 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.old"] [unique_id "aZmryJpe9KOFdAtIQx5jLQAAAAw"] [Sat Feb 21 17:57:45.778558 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.www"] [unique_id "aZmryVAuKWjBndpBvNwT9QAAAAQ"] [Sat Feb 21 17:57:46.532693 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.www"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.www"] [unique_id "aZmryvPgItFgXMKgTSvgRAAAAAk"] [Sat Feb 21 17:57:47.802489 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.docker/.env"] [unique_id "aZmry64igNZqZ6eKtslRYwAAAAU"] [Sat Feb 21 17:57:48.571788 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.docker/.env"] [unique_id "aZmrzD1ptPcqn_sBRBesKAAAAAc"] [Sat Feb 21 17:57:49.791786 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.dev"] [unique_id "aZmrzdpGmemyPzimpI2arQAAAAA"] [Sat Feb 21 17:57:50.664283 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.dev"] [unique_id "aZmrzmV54eR_jh_j4D-5OgAAAAo"] [Sat Feb 21 17:57:50.848978 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrzvtESZ8OtrhBvYu-agAAAAg"] [Sat Feb 21 17:57:50.849062 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmrzvtESZ8OtrhBvYu-agAAAAg"] [Sat Feb 21 17:57:52.193103 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.example"] [unique_id "aZmr0PPgItFgXMKgTSvgTQAAAAk"] [Sat Feb 21 17:57:53.060902 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.example"] [unique_id "aZmr0f_5kngxRGoMXipLOAAAAAY"] [Sat Feb 21 17:57:53.246645 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:57:54.111780 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_1"] [unique_id "aZmr0j1ptPcqn_sBRBesLQAAAAc"] [Sat Feb 21 17:57:55.030282 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_1"] [unique_id "aZmr0xBFSwbWxfUieig27AAAAAM"] [Sat Feb 21 17:57:55.090633 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmr02V54eR_jh_j4D-5PwAAAAo"] [Sat Feb 21 17:57:56.194220 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.stage"] [unique_id "aZmr1D1ptPcqn_sBRBesLwAAAAc"] [Sat Feb 21 17:57:56.725088 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr1FAuKWjBndpBvNwUAAAAAAQ"] [Sat Feb 21 17:57:56.725149 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr1FAuKWjBndpBvNwUAAAAAAQ"] [Sat Feb 21 17:57:56.900468 2026] [security2:error] [pid 2172634:tid 2172634] [client 20.210.88.198:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-global": Permission denied [hostname "vascardmedical.com"] [uri "/wp-admin/css/"] [unique_id "aZmr1Jpe9KOFdAtIQx5jOAAAAAw"] [Sat Feb 21 17:57:56.900538 2026] [security2:error] [pid 2172634:tid 2172634] [client 20.210.88.198:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/vascardmedical-ip": Permission denied [hostname "vascardmedical.com"] [uri "/wp-admin/css/"] [unique_id "aZmr1Jpe9KOFdAtIQx5jOAAAAAw"] [Sat Feb 21 17:57:56.982205 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.stage"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.stage"] [unique_id "aZmr1NpGmemyPzimpI2atwAAAAA"] [Sat Feb 21 17:57:59.060454 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr1lAuKWjBndpBvNwUBAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 17:57:59.060538 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr1lAuKWjBndpBvNwUBAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 17:58:00.860612 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmr164igNZqZ6eKtslRdQAAAAU"] [Sat Feb 21 17:58:00.860685 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmr164igNZqZ6eKtslRdQAAAAU"] [Sat Feb 21 17:58:02.279446 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.environment"] [unique_id "aZmr2v_5kngxRGoMXipLQgAAAAY"] [Sat Feb 21 17:58:03.057750 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.environment"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.environment"] [unique_id "aZmr29mhpGBHFKcOJBM60AAAAAs"] [Sat Feb 21 17:58:04.299249 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.production"] [unique_id "aZmr3FAuKWjBndpBvNwUDAAAAAQ"] [Sat Feb 21 17:58:05.182989 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.production"] [unique_id "aZmr3XR5aF-0Eejvpr9e7QAAAA0"] [Sat Feb 21 17:58:06.110198 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".bash_logout" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_logout found within ARGS:file: .bash_logout"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmr3v_5kngxRGoMXipLRgAAAAY"] [Sat Feb 21 17:58:06.968157 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.production.local"] [unique_id "aZmr3tpGmemyPzimpI2awgAAAAA"] [Sat Feb 21 17:58:07.935627 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.production.local"] [unique_id "aZmr3xxmZo-HQv7YnF7JPgAAAAE"] [Sat Feb 21 17:58:11.933613 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr4__5kngxRGoMXipLUAAAAAY"] [Sat Feb 21 17:58:11.933671 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr4__5kngxRGoMXipLUAAAAAY"] [Sat Feb 21 17:58:15.180364 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.envs"] [unique_id "aZmr52V54eR_jh_j4D-5YAAAAAo"] [Sat Feb 21 17:58:15.935086 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.envs"] [unique_id "aZmr59pGmemyPzimpI2a0AAAAAA"] [Sat Feb 21 17:58:17.168135 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.docker"] [unique_id "aZmr6RxmZo-HQv7YnF7JSAAAAAE"] [Sat Feb 21 17:58:17.367435 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr6f_5kngxRGoMXipLWQAAAAY"] [Sat Feb 21 17:58:17.367523 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr6f_5kngxRGoMXipLWQAAAAY"] [Sat Feb 21 17:58:17.977081 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.docker"] [unique_id "aZmr6WV54eR_jh_j4D-5ZAAAAAo"] [Sat Feb 21 17:58:18.431083 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr6hxmZo-HQv7YnF7JSQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 17:58:18.431261 2026] [security2:error] [pid 2121618:tid 2121618] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr6hxmZo-HQv7YnF7JSQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 17:58:19.167183 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.sample"] [unique_id "aZmr61AuKWjBndpBvNwUHQAAAAQ"] [Sat Feb 21 17:58:19.649333 2026] [security2:error] [pid 2172467:tid 2172467] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmr69mhpGBHFKcOJBM65QAAAAs"] [Sat Feb 21 17:58:19.959431 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.sample"] [unique_id "aZmr63R5aF-0Eejvpr9fAwAAAA0"] [Sat Feb 21 17:58:20.921783 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmr7FAuKWjBndpBvNwUHwAAAAQ"] [Sat Feb 21 17:58:21.145847 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_bak"] [unique_id "aZmr7dmhpGBHFKcOJBM66AAAAAs"] [Sat Feb 21 17:58:22.012222 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_bak"] [unique_id "aZmr7v_5kngxRGoMXipLYQAAAAY"] [Sat Feb 21 17:58:23.276558 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.php"] [unique_id "aZmr72V54eR_jh_j4D-5aQAAAAo"] [Sat Feb 21 17:58:23.293770 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".bash_logout" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_logout found within ARGS:file: .bash_logout"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmr73R5aF-0Eejvpr9fBwAAAA0"] [Sat Feb 21 17:58:24.164788 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.php"] [unique_id "aZmr8BBFSwbWxfUieig3GQAAAAM"] [Sat Feb 21 17:58:25.280856 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.development.local"] [unique_id "aZmr8VAuKWjBndpBvNwUJgAAAAQ"] [Sat Feb 21 17:58:26.296423 2026] [security2:error] [pid 2122965:tid 2122965] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.development.local"] [unique_id "aZmr8vtESZ8OtrhBvYu-mgAAAAg"] [Sat Feb 21 17:58:27.504665 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env-example"] [unique_id "aZmr89pGmemyPzimpI2a4gAAAAA"] [Sat Feb 21 17:58:28.299017 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env-example"] [unique_id "aZmr9K4igNZqZ6eKtslRlwAAAAU"] [Sat Feb 21 17:58:28.394448 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr9HR5aF-0Eejvpr9fDwAAAA0"] [Sat Feb 21 17:58:28.394509 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmr9HR5aF-0Eejvpr9fDwAAAA0"] [Sat Feb 21 17:58:29.373369 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.prod"] [unique_id "aZmr9Zpe9KOFdAtIQx5jagAAAAw"] [Sat Feb 21 17:58:30.176655 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.prod"] [unique_id "aZmr9vPgItFgXMKgTSvgfQAAAAk"] [Sat Feb 21 17:58:31.217383 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.docker.dev"] [unique_id "aZmr99pGmemyPzimpI2a5wAAAAA"] [Sat Feb 21 17:58:32.077966 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.docker.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.docker.dev"] [unique_id "aZmr-HR5aF-0Eejvpr9fFQAAAA0"] [Sat Feb 21 17:58:33.272734 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.test"] [unique_id "aZmr-WV54eR_jh_j4D-5eAAAAAo"] [Sat Feb 21 17:58:34.286569 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.test"] [unique_id "aZmr-hxmZo-HQv7YnF7JXQAAAAE"] [Sat Feb 21 17:58:41.112751 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsAf_5kngxRGoMXipLdwAAAAY"] [Sat Feb 21 17:58:41.112808 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsAf_5kngxRGoMXipLdwAAAAY"] [Sat Feb 21 17:58:42.542645 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsAq4igNZqZ6eKtslRqgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 17:58:42.542734 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsAq4igNZqZ6eKtslRqgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 17:58:44.140973 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:58:44.474347 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmsBNpGmemyPzimpI2a-QAAAAA"] [Sat Feb 21 17:58:49.117557 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmsCXR5aF-0Eejvpr9fLgAAAA0"] [Sat Feb 21 17:58:54.119045 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.dev.local"] [unique_id "aZmsDj1ptPcqn_sBRBesdwAAAAc"] [Sat Feb 21 17:58:54.338131 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsDvtESZ8OtrhBvYu-wQAAAAg"] [Sat Feb 21 17:58:54.338220 2026] [security2:error] [pid 2122965:tid 2122965] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsDvtESZ8OtrhBvYu-wQAAAAg"] [Sat Feb 21 17:58:54.948266 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.dev.local"] [unique_id "aZmsDvPgItFgXMKgTSvglwAAAAk"] [Sat Feb 21 17:58:58.049625 2026] [security2:error] [pid 2122965:tid 2122965] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_old"] [unique_id "aZmsEvtESZ8OtrhBvYu-xgAAAAg"] [Sat Feb 21 17:58:58.771143 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_old"] [unique_id "aZmsEtmhpGBHFKcOJBM7FAAAAAs"] [Sat Feb 21 17:59:00.466872 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsFJpe9KOFdAtIQx5jkAAAAAw"] [Sat Feb 21 17:59:00.466968 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsFJpe9KOFdAtIQx5jkAAAAAw"] [Sat Feb 21 17:59:01.459729 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsFf_5kngxRGoMXipLkQAAAAY"] [Sat Feb 21 17:59:01.459828 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsFf_5kngxRGoMXipLkQAAAAY"] [Sat Feb 21 17:59:01.880479 2026] [security2:error] [pid 2122965:tid 2122965] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.development.sample"] [unique_id "aZmsFftESZ8OtrhBvYu-ywAAAAg"] [Sat Feb 21 17:59:02.809487 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsFv_5kngxRGoMXipLkwAAAAY"] [Sat Feb 21 17:59:02.809557 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsFv_5kngxRGoMXipLkwAAAAY"] [Sat Feb 21 17:59:02.934228 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.development.sample"] [unique_id "aZmsFnR5aF-0Eejvpr9fQgAAAA0"] [Sat Feb 21 17:59:02.979208 2026] [security2:error] [pid 2173288:tid 2173288] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmsFfPgItFgXMKgTSvgnwAAAAk"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:59:02.979310 2026] [security2:error] [pid 2173288:tid 2173288] [client 5.63.19.3:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmsFfPgItFgXMKgTSvgnwAAAAk"], referer: https://ALLIANCECHEM-ENG.COM/wp-login.php [Sat Feb 21 17:59:06.560035 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env-sample"] [unique_id "aZmsGnR5aF-0Eejvpr9fRAAAAA0"] [Sat Feb 21 17:59:07.374636 2026] [security2:error] [pid 2122965:tid 2122965] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env-sample"] [unique_id "aZmsG_tESZ8OtrhBvYu-0wAAAAg"] [Sat Feb 21 17:59:07.731610 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsGxxmZo-HQv7YnF7JhwAAAAE"] [Sat Feb 21 17:59:07.731703 2026] [security2:error] [pid 2121618:tid 2121618] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsGxxmZo-HQv7YnF7JhwAAAAE"] [Sat Feb 21 17:59:08.592211 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.prod.local"] [unique_id "aZmsHNmhpGBHFKcOJBM7IwAAAAs"] [Sat Feb 21 17:59:08.724305 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/sudoers" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sudoers found within ARGS:path: /etc/sudoers.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmsHNpGmemyPzimpI2bGwAAAAA"] [Sat Feb 21 17:59:09.469538 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.prod.local"] [unique_id "aZmsHfPgItFgXMKgTSvgqAAAAAk"] [Sat Feb 21 17:59:10.302620 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsHvtESZ8OtrhBvYu-1gAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 17:59:10.302695 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsHvtESZ8OtrhBvYu-1gAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fmq%2F0 [Sat Feb 21 17:59:10.613207 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.travis"] [unique_id "aZmsHq4igNZqZ6eKtslRzwAAAAU"] [Sat Feb 21 17:59:11.438648 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.travis"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.travis"] [unique_id "aZmsH3R5aF-0Eejvpr9fSwAAAA0"] [Sat Feb 21 17:59:12.597031 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.test.sample"] [unique_id "aZmsID1ptPcqn_sBRBeskQAAAAc"] [Sat Feb 21 17:59:13.279855 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsIdpGmemyPzimpI2bIgAAAAA"] [Sat Feb 21 17:59:13.279940 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsIdpGmemyPzimpI2bIgAAAAA"] [Sat Feb 21 17:59:13.339230 2026] [security2:error] [pid 2122965:tid 2122965] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.test.sample"] [unique_id "aZmsIftESZ8OtrhBvYu-2gAAAAg"] [Sat Feb 21 17:59:14.435413 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.2"] [unique_id "aZmsIj1ptPcqn_sBRBeskwAAAAc"] [Sat Feb 21 17:59:15.204936 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.2"] [unique_id "aZmsIxxmZo-HQv7YnF7JkAAAAAE"] [Sat Feb 21 17:59:15.363585 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsIxBFSwbWxfUieig3XQAAAAM"] [Sat Feb 21 17:59:15.363671 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsIxBFSwbWxfUieig3XQAAAAM"] [Sat Feb 21 17:59:15.719646 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsI_tESZ8OtrhBvYu-3AAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 17:59:15.719743 2026] [security2:error] [pid 2122965:tid 2122965] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsI_tESZ8OtrhBvYu-3AAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 17:59:16.337628 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:59:16.367575 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.vscode/.env"] [unique_id "aZmsJPPgItFgXMKgTSvgsQAAAAk"] [Sat Feb 21 17:59:17.065559 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.vscode/.env"] [unique_id "aZmsJdpGmemyPzimpI2bKAAAAAA"] [Sat Feb 21 17:59:18.222624 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.local"] [unique_id "aZmsJhxmZo-HQv7YnF7JkwAAAAE"] [Sat Feb 21 17:59:18.983426 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.local"] [unique_id "aZmsJq4igNZqZ6eKtslR2wAAAAU"] [Sat Feb 21 17:59:19.109427 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsJxBFSwbWxfUieig3YwAAAAM"] [Sat Feb 21 17:59:19.109498 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsJxBFSwbWxfUieig3YwAAAAM"] [Sat Feb 21 17:59:20.218746 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.txt"] [unique_id "aZmsKBxmZo-HQv7YnF7JlQAAAAE"] [Sat Feb 21 17:59:21.060488 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.txt"] [unique_id "aZmsKf_5kngxRGoMXipLrgAAAAY"] [Sat Feb 21 17:59:22.254978 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.save"] [unique_id "aZmsKj1ptPcqn_sBRBesnQAAAAc"] [Sat Feb 21 17:59:23.145385 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.save"] [unique_id "aZmsK_PgItFgXMKgTSvguQAAAAk"] [Sat Feb 21 17:59:24.271159 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsLNpGmemyPzimpI2bMgAAAAA"] [Sat Feb 21 17:59:24.271214 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsLNpGmemyPzimpI2bMgAAAAA"] [Sat Feb 21 17:59:28.742624 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.test.local"] [unique_id "aZmsMK4igNZqZ6eKtslR6wAAAAU"] [Sat Feb 21 17:59:29.562724 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.test.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.test.local"] [unique_id "aZmsMf_5kngxRGoMXipLugAAAAY"] [Sat Feb 21 17:59:33.060232 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.envrc"] [unique_id "aZmsNfPgItFgXMKgTSvgyAAAAAk"] [Sat Feb 21 17:59:33.880403 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.envrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.envrc"] [unique_id "aZmsNa4igNZqZ6eKtslR9AAAAAU"] [Sat Feb 21 17:59:34.959495 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.dist"] [unique_id "aZmsNj1ptPcqn_sBRBestAAAAAc"] [Sat Feb 21 17:59:35.874392 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.dist"] [unique_id "aZmsNxxmZo-HQv7YnF7JpQAAAAE"] [Sat Feb 21 17:59:37.052686 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.sample.php"] [unique_id "aZmsOa4igNZqZ6eKtslR9gAAAAU"] [Sat Feb 21 17:59:37.778170 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.sample.php"] [unique_id "aZmsOf_5kngxRGoMXipLxwAAAAY"] [Sat Feb 21 17:59:38.940804 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env1"] [unique_id "aZmsOmV54eR_jh_j4D-51wAAAAo"] [Sat Feb 21 17:59:39.884653 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env1"] [unique_id "aZmsO5pe9KOFdAtIQx5jwQAAAAw"] [Sat Feb 21 17:59:44.376510 2026] [security2:error] [pid 2172467:tid 2172467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsQNmhpGBHFKcOJBM7UAAAAAs"] [Sat Feb 21 17:59:44.376642 2026] [security2:error] [pid 2172467:tid 2172467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsQNmhpGBHFKcOJBM7UAAAAAs"] [Sat Feb 21 17:59:46.566392 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/env.bak"] [unique_id "aZmsQnR5aF-0Eejvpr9ffgAAAA0"] [Sat Feb 21 17:59:47.364891 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/env.bak"] [unique_id "aZmsQ1AuKWjBndpBvNwUkwAAAAQ"] [Sat Feb 21 17:59:48.683351 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsRHR5aF-0Eejvpr9fgAAAAA0"] [Sat Feb 21 17:59:48.683419 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsRHR5aF-0Eejvpr9fgAAAAA0"] [Sat Feb 21 17:59:49.419473 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsRXR5aF-0Eejvpr9fgQAAAA0"] [Sat Feb 21 17:59:49.419527 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsRXR5aF-0Eejvpr9fgQAAAA0"] [Sat Feb 21 17:59:52.363531 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "bwtand.com"] [uri "/pms"] [unique_id "aZmsSBxmZo-HQv7YnF7JvAAAAAE"] [Sat Feb 21 17:59:52.363735 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "bwtand.com"] [uri "/pms"] [unique_id "aZmsSBxmZo-HQv7YnF7JvAAAAAE"] [Sat Feb 21 17:59:52.363870 2026] [security2:error] [pid 2121618:tid 2121618] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "bwtand.com"] [uri "/pms"] [unique_id "aZmsSBxmZo-HQv7YnF7JvAAAAAE"] [Sat Feb 21 17:59:53.209852 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.bwtand.com"] [uri "/pms"] [unique_id "aZmsSRBFSwbWxfUieig3mQAAAAM"] [Sat Feb 21 17:59:53.209970 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.bwtand.com"] [uri "/pms"] [unique_id "aZmsSRBFSwbWxfUieig3mQAAAAM"] [Sat Feb 21 17:59:53.210034 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "www.bwtand.com"] [uri "/pms"] [unique_id "aZmsSRBFSwbWxfUieig3mQAAAAM"] [Sat Feb 21 17:59:53.319425 2026] [access_compat:error] [pid 2174419:tid 2174419] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 17:59:54.451657 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /k8s/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/k8s/.env"] [unique_id "aZmsSppe9KOFdAtIQx5j1QAAAAw"] [Sat Feb 21 17:59:54.867176 2026] [security2:error] [pid 2170028:tid 2170028] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsSv_5kngxRGoMXipL3gAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:59:54.867264 2026] [security2:error] [pid 2170028:tid 2170028] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsSv_5kngxRGoMXipL3gAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 17:59:55.255438 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /k8s/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/k8s/.env"] [unique_id "aZmsS3R5aF-0Eejvpr9fiAAAAA0"] [Sat Feb 21 17:59:56.382498 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 17:59:56.431103 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/config/.env"] [unique_id "aZmsTD1ptPcqn_sBRBes0wAAAAc"] [Sat Feb 21 17:59:57.282373 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/config/.env"] [unique_id "aZmsTVAuKWjBndpBvNwUnwAAAAQ"] [Sat Feb 21 17:59:58.403859 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/.env"] [unique_id "aZmsTmV54eR_jh_j4D-58AAAAAo"] [Sat Feb 21 17:59:59.257329 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/.env"] [unique_id "aZmsT_PgItFgXMKgTSvg6QAAAAk"] [Sat Feb 21 18:00:00.520298 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/.env"] [unique_id "aZmsUFAuKWjBndpBvNwUogAAAAQ"] [Sat Feb 21 18:00:00.543451 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsUJpe9KOFdAtIQx5j3QAAAAw"] [Sat Feb 21 18:00:00.543582 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsUJpe9KOFdAtIQx5j3QAAAAw"] [Sat Feb 21 18:00:01.398734 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/.env"] [unique_id "aZmsUdpGmemyPzimpI2bYgAAAAA"] [Sat Feb 21 18:00:03.097664 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/backend/.env"] [unique_id "aZmsUxBFSwbWxfUieig3pwAAAAM"] [Sat Feb 21 18:00:04.145634 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/backend/.env"] [unique_id "aZmsVFAuKWjBndpBvNwUpgAAAAQ"] [Sat Feb 21 18:00:04.610222 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsVNpGmemyPzimpI2bZAAAAAA"] [Sat Feb 21 18:00:04.610297 2026] [security2:error] [pid 2095811:tid 2095811] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsVNpGmemyPzimpI2bZAAAAAA"] [Sat Feb 21 18:00:05.810198 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/.env"] [unique_id "aZmsVdpGmemyPzimpI2bZgAAAAA"] [Sat Feb 21 18:00:07.294204 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/.env"] [unique_id "aZmsV5pe9KOFdAtIQx5j6AAAAAw"] [Sat Feb 21 18:00:09.379392 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/admin/.env"] [unique_id "aZmsWT1ptPcqn_sBRBes5QAAAAc"] [Sat Feb 21 18:00:10.394821 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsWtpGmemyPzimpI2bbQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 18:00:10.394889 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsWtpGmemyPzimpI2bbQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 18:00:10.472810 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/admin/.env"] [unique_id "aZmsWnR5aF-0Eejvpr9foQAAAA0"] [Sat Feb 21 18:00:10.993100 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsWj1ptPcqn_sBRBes5gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 18:00:10.993195 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsWj1ptPcqn_sBRBes5gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 18:00:12.013826 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/public/.env"] [unique_id "aZmsXP_5kngxRGoMXipL_AAAAAY"] [Sat Feb 21 18:00:12.924918 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/public/.env"] [unique_id "aZmsXHR5aF-0Eejvpr9fowAAAA0"] [Sat Feb 21 18:00:14.427853 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/web/.env"] [unique_id "aZmsXppe9KOFdAtIQx5j8AAAAAw"] [Sat Feb 21 18:00:15.568000 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/web/.env"] [unique_id "aZmsXxBFSwbWxfUieig3ugAAAAM"] [Sat Feb 21 18:00:16.810940 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/server/.env"] [unique_id "aZmsYGV54eR_jh_j4D-6EAAAAAo"] [Sat Feb 21 18:00:17.202635 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsYT1ptPcqn_sBRBes8QAAAAc"] [Sat Feb 21 18:00:17.202715 2026] [security2:error] [pid 2117316:tid 2117316] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsYT1ptPcqn_sBRBes8QAAAAc"] [Sat Feb 21 18:00:17.657838 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/server/.env"] [unique_id "aZmsYdpGmemyPzimpI2begAAAAA"] [Sat Feb 21 18:00:18.922635 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/client/.env"] [unique_id "aZmsYmV54eR_jh_j4D-6EwAAAAo"] [Sat Feb 21 18:00:19.871462 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/client/.env"] [unique_id "aZmsY5pe9KOFdAtIQx5j9gAAAAw"] [Sat Feb 21 18:00:21.185966 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/frontend/.env"] [unique_id "aZmsZf_5kngxRGoMXipMDAAAAAY"] [Sat Feb 21 18:00:22.092556 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/frontend/.env"] [unique_id "aZmsZtpGmemyPzimpI2bgQAAAAA"] [Sat Feb 21 18:00:23.467976 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmsZtpGmemyPzimpI2bgQAAAAA"] [Sat Feb 21 18:00:23.468075 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmsZtpGmemyPzimpI2bgQAAAAA"] [Sat Feb 21 18:00:23.537383 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.development"] [unique_id "aZmsZ2V54eR_jh_j4D-6GwAAAAo"] [Sat Feb 21 18:00:24.533348 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.development"] [unique_id "aZmsaHe2RSgv5splKwnrRAAAAAI"] [Sat Feb 21 18:00:24.660167 2026] [autoindex:error] [pid 2118467:tid 2118467] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:00:26.020043 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.staging"] [unique_id "aZmsatmhpGBHFKcOJBM7iwAAAAs"] [Sat Feb 21 18:00:26.894628 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.staging"] [unique_id "aZmsane2RSgv5splKwnrRgAAAAI"] [Sat Feb 21 18:00:27.692906 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsa1AuKWjBndpBvNwUtgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 18:00:27.692989 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsa1AuKWjBndpBvNwUtgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7 [Sat Feb 21 18:00:28.253841 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.live"] [unique_id "aZmsbJpe9KOFdAtIQx5j_wAAAAw"] [Sat Feb 21 18:00:29.117957 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.live"] [unique_id "aZmsbVAuKWjBndpBvNwUuQAAAAQ"] [Sat Feb 21 18:00:32.991194 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmscFAuKWjBndpBvNwUvAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 18:00:32.991251 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmscFAuKWjBndpBvNwUvAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 18:00:36.913712 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmsc9mhpGBHFKcOJBM7mAAAAAs"] [Sat Feb 21 18:00:36.913805 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmsc9mhpGBHFKcOJBM7mAAAAAs"] [Sat Feb 21 18:00:43.424793 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmse64igNZqZ6eKtslSVwAAAAU"] [Sat Feb 21 18:00:43.424908 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmse64igNZqZ6eKtslSVwAAAAU"] [Sat Feb 21 18:00:44.199655 2026] [security2:error] [pid 2172634:tid 2172634] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-global": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/wp-content/index.php"] [unique_id "aZmsfJpe9KOFdAtIQx5kFQAAAAw"] [Sat Feb 21 18:00:44.199715 2026] [security2:error] [pid 2172634:tid 2172634] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-ip": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/wp-content/index.php"] [unique_id "aZmsfJpe9KOFdAtIQx5kFQAAAAw"] [Sat Feb 21 18:00:44.936345 2026] [security2:error] [pid 2124119:tid 2124119] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmsexBFSwbWxfUieig35wAAAAM"] [Sat Feb 21 18:00:44.936442 2026] [security2:error] [pid 2124119:tid 2124119] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmsexBFSwbWxfUieig35wAAAAM"] [Sat Feb 21 18:00:47.493471 2026] [security2:error] [pid 2173288:tid 2173288] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsf_PgItFgXMKgTSvhLAAAAAk"] [Sat Feb 21 18:00:47.493599 2026] [security2:error] [pid 2173288:tid 2173288] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsf_PgItFgXMKgTSvhLAAAAAk"] [Sat Feb 21 18:00:47.600220 2026] [security2:error] [pid 2178345:tid 2178345] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmsfne2RSgv5splKwnrYAAAAAI"] [Sat Feb 21 18:00:47.600293 2026] [security2:error] [pid 2178345:tid 2178345] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmsfne2RSgv5splKwnrYAAAAAI"] [Sat Feb 21 18:00:54.783452 2026] [cgi:error] [pid 2172467:tid 2172467] [client 52.172.248.2:0] AH02812: stderr from /home/osprify/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 18:00:55.477797 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php"] [unique_id "aZmsh2V54eR_jh_j4D-6SAAAAAo"] [Sat Feb 21 18:01:02.886224 2026] [security2:error] [pid 2179060:tid 2179060] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmsjilg3Lw1204iizmEXQAAAAg"] [Sat Feb 21 18:01:03.225756 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsj_PgItFgXMKgTSvhRQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 18:01:03.225851 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsj_PgItFgXMKgTSvhRQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 18:01:09.796123 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmslZpe9KOFdAtIQx5kOwAAAAw"] [Sat Feb 21 18:01:09.796207 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmslZpe9KOFdAtIQx5kOwAAAAw"] [Sat Feb 21 18:01:13.679700 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsmdpGmemyPzimpI2bxQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 18:01:13.679811 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsmdpGmemyPzimpI2bxQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fmq%2F0 [Sat Feb 21 18:01:13.992361 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmsmR09CmUltJs1PthYVAAAAAE"] [Sat Feb 21 18:01:14.638061 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsmhBFSwbWxfUieig4BwAAAAM"] [Sat Feb 21 18:01:14.638135 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsmhBFSwbWxfUieig4BwAAAAM"] [Sat Feb 21 18:01:20.156758 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsn2V54eR_jh_j4D-6bwAAAAo"] [Sat Feb 21 18:01:20.156855 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsn2V54eR_jh_j4D-6bwAAAAo"] [Sat Feb 21 18:01:20.980694 2026] [access_compat:error] [pid 2178345:tid 2178345] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:01:21.185420 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/private/.env"] [unique_id "aZmsoa4igNZqZ6eKtslSkgAAAAU"] [Sat Feb 21 18:01:21.594669 2026] [security2:error] [pid 2095811:tid 2095811] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmsn9pGmemyPzimpI2bywAAAAA"] [Sat Feb 21 18:01:21.594788 2026] [security2:error] [pid 2095811:tid 2095811] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmsn9pGmemyPzimpI2bywAAAAA"] [Sat Feb 21 18:01:22.079704 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/private/.env"] [unique_id "aZmsovPgItFgXMKgTSvhVwAAAAk"] [Sat Feb 21 18:01:23.378002 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/backup/.env"] [unique_id "aZmso9mhpGBHFKcOJBM72QAAAAs"] [Sat Feb 21 18:01:23.502094 2026] [autoindex:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/.well-known/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:01:24.241693 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/backup/.env"] [unique_id "aZmspHe2RSgv5splKwnrigAAAAI"] [Sat Feb 21 18:01:25.776477 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/.env"] [unique_id "aZmspT1ptPcqn_sBRBetQgAAAAc"] [Sat Feb 21 18:01:26.740454 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/.env"] [unique_id "aZmsplAuKWjBndpBvNwU-gAAAAQ"] [Sat Feb 21 18:01:27.973263 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dev/.env"] [unique_id "aZmsp3e2RSgv5splKwnrjgAAAAI"] [Sat Feb 21 18:01:28.932723 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dev/.env"] [unique_id "aZmsqNpGmemyPzimpI2b1wAAAAA"] [Sat Feb 21 18:01:30.283754 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/staging/.env"] [unique_id "aZmsqnR5aF-0Eejvpr9gCgAAAA0"] [Sat Feb 21 18:01:31.270264 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/staging/.env"] [unique_id "aZmsqx09CmUltJs1PthYaQAAAAE"] [Sat Feb 21 18:01:32.552735 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/production/.env"] [unique_id "aZmsrP_5kngxRGoMXipMcAAAAAY"] [Sat Feb 21 18:01:33.424177 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/production/.env"] [unique_id "aZmsrXe2RSgv5splKwnrlQAAAAI"] [Sat Feb 21 18:01:34.570310 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/.env"] [unique_id "aZmsrtpGmemyPzimpI2b3wAAAAA"] [Sat Feb 21 18:01:34.681065 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsrh09CmUltJs1PthYbQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3 [Sat Feb 21 18:01:34.681183 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsrh09CmUltJs1PthYbQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3 [Sat Feb 21 18:01:35.468026 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/.env"] [unique_id "aZmsrz1ptPcqn_sBRBetUQAAAAc"] [Sat Feb 21 18:01:39.922027 2026] [security2:error] [pid 2179060:tid 2179060] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmssylg3Lw1204iizmEmgAAAAg"] [Sat Feb 21 18:01:45.070854 2026] [autoindex:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:01:49.313654 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsvR09CmUltJs1PthYggAAAAE"] [Sat Feb 21 18:01:49.313715 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsvR09CmUltJs1PthYggAAAAE"] [Sat Feb 21 18:01:57.416768 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/administrator/.env"] [unique_id "aZmsxSlg3Lw1204iizmEsQAAAAg"] [Sat Feb 21 18:01:58.310563 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /administrator/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/administrator/.env"] [unique_id "aZmsxne2RSgv5splKwnrtAAAAAI"] [Sat Feb 21 18:01:58.338847 2026] [security2:error] [pid 2170028:tid 2170028] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsxv_5kngxRGoMXipMkAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5 [Sat Feb 21 18:01:58.338921 2026] [security2:error] [pid 2170028:tid 2170028] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmsxv_5kngxRGoMXipMkAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5 [Sat Feb 21 18:01:59.506417 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cms/.env"] [unique_id "aZmsx2V54eR_jh_j4D-6pgAAAAo"] [Sat Feb 21 18:02:00.371850 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cms/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cms/.env"] [unique_id "aZmsyNmhpGBHFKcOJBM8CwAAAAs"] [Sat Feb 21 18:02:01.290392 2026] [autoindex:error] [pid 2117316:tid 2117316] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:02:01.980237 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/portal/.env"] [unique_id "aZmsySlg3Lw1204iizmEtwAAAAg"] [Sat Feb 21 18:02:03.107056 2026] [security2:error] [pid 2172467:tid 2172467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /portal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/portal/.env"] [unique_id "aZmsy9mhpGBHFKcOJBM8DQAAAAs"] [Sat Feb 21 18:02:04.599029 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dashboard/.env"] [unique_id "aZmszD1ptPcqn_sBRBetbgAAAAc"] [Sat Feb 21 18:02:05.430740 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dashboard/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dashboard/.env"] [unique_id "aZmszWV54eR_jh_j4D-6qwAAAAo"] [Sat Feb 21 18:02:06.805189 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/crm/.env"] [unique_id "aZmszlAuKWjBndpBvNwVMQAAAAQ"] [Sat Feb 21 18:02:07.590450 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmszlAuKWjBndpBvNwVMQAAAAQ"] [Sat Feb 21 18:02:07.590528 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmszlAuKWjBndpBvNwVMQAAAAQ"] [Sat Feb 21 18:02:07.639236 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/crm/.env"] [unique_id "aZmszylg3Lw1204iizmEuwAAAAg"] [Sat Feb 21 18:02:07.755200 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmszxBFSwbWxfUieig4SgAAAAM"] [Sat Feb 21 18:02:07.755306 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmszxBFSwbWxfUieig4SgAAAAM"] [Sat Feb 21 18:02:09.023155 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mail/.env"] [unique_id "aZms0WV54eR_jh_j4D-6rwAAAAo"] [Sat Feb 21 18:02:09.843390 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/mail/.env"] [unique_id "aZms0Xe2RSgv5splKwnrwAAAAAI"] [Sat Feb 21 18:02:10.110138 2026] [autoindex:error] [pid 2167082:tid 2167082] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:02:11.101132 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mailer/.env"] [unique_id "aZms01AuKWjBndpBvNwVNwAAAAQ"] [Sat Feb 21 18:02:11.482664 2026] [security2:error] [pid 2179060:tid 2179060] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZms0ylg3Lw1204iizmEvwAAAAg"] [Sat Feb 21 18:02:11.482726 2026] [security2:error] [pid 2179060:tid 2179060] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZms0ylg3Lw1204iizmEvwAAAAg"] [Sat Feb 21 18:02:11.827231 2026] [security2:error] [pid 2173288:tid 2173288] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZms0fPgItFgXMKgTSvhkgAAAAk"] [Sat Feb 21 18:02:11.827328 2026] [security2:error] [pid 2173288:tid 2173288] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZms0fPgItFgXMKgTSvhkgAAAAk"] [Sat Feb 21 18:02:12.130528 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/mailer/.env"] [unique_id "aZms1He2RSgv5splKwnrwgAAAAI"] [Sat Feb 21 18:02:13.035201 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZms1XR5aF-0Eejvpr9gPQAAAA0"] [Sat Feb 21 18:02:13.397901 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/deployment/.env"] [unique_id "aZms1RBFSwbWxfUieig4UwAAAAM"] [Sat Feb 21 18:02:14.232558 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deployment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/deployment/.env"] [unique_id "aZms1mV54eR_jh_j4D-6tQAAAAo"] [Sat Feb 21 18:02:15.516507 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/.env"] [unique_id "aZms15pe9KOFdAtIQx5kkAAAAAw"] [Sat Feb 21 18:02:16.081761 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZms164igNZqZ6eKtslS1QAAAAU"] [Sat Feb 21 18:02:16.081817 2026] [security2:error] [pid 2167082:tid 2167082] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZms164igNZqZ6eKtslS1QAAAAU"] [Sat Feb 21 18:02:16.424336 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/.env"] [unique_id "aZms2K4igNZqZ6eKtslS1gAAAAU"] [Sat Feb 21 18:02:17.495974 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZms2VAuKWjBndpBvNwVPgAAAAQ"] [Sat Feb 21 18:02:17.496052 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZms2VAuKWjBndpBvNwVPgAAAAQ"] [Sat Feb 21 18:02:17.528943 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/helm/.env"] [unique_id "aZms2RBFSwbWxfUieig4VgAAAAM"] [Sat Feb 21 18:02:18.376528 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/helm/.env"] [unique_id "aZms2q4igNZqZ6eKtslS2AAAAAU"] [Sat Feb 21 18:02:19.827923 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/terraform/.env"] [unique_id "aZms23e2RSgv5splKwnrzAAAAAI"] [Sat Feb 21 18:02:20.699165 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /terraform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/terraform/.env"] [unique_id "aZms3Jpe9KOFdAtIQx5kmQAAAAw"] [Sat Feb 21 18:02:22.012663 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ansible/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ansible/.env"] [unique_id "aZms3mV54eR_jh_j4D-6uQAAAAo"] [Sat Feb 21 18:02:22.855328 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ansible/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ansible/.env"] [unique_id "aZms3ne2RSgv5splKwnr0AAAAAI"] [Sat Feb 21 18:02:26.564888 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:02:26.692265 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: Warning. Pattern match "(?i:(?:[\\\\d\\\\W]\\\\s+as\\\\s*?[\\"'`\\\\w]+\\\\s*?from)|(?:^[\\\\W\\\\d]+\\\\s*?(?:union|select|create|rename|truncate|load|alter|delete|update|insert|desc)\\\\b)|(?:(?:select|create|rename|truncate|load|alter|delete|update|insert|desc)\\\\s+(?:(?:group_)concat|char|load ..." at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "81"] [id "942360"] [rev "2"] [msg "Detects concatenated basic SQL injection and SQLLFI attempts"] [data "Matched Data: .desc found within ARGS:file: .desc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZms4ppe9KOFdAtIQx5koQAAAAw"] [Sat Feb 21 18:02:34.474950 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_example"] [unique_id "aZms6mV54eR_jh_j4D-6xgAAAAo"] [Sat Feb 21 18:02:35.220219 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:35.302742 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_example"] [unique_id "aZms6x09CmUltJs1PthYxAAAAAE"] [Sat Feb 21 18:02:35.476464 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:35.725528 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:36.316183 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:36.471561 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/core/.env"] [unique_id "aZms7Clg3Lw1204iizmE5AAAAAg"] [Sat Feb 21 18:02:36.634878 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:36.962742 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:02:37.004755 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:37.260602 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:37.423845 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/core/.env"] [unique_id "aZms7a4igNZqZ6eKtslS6wAAAAU"] [Sat Feb 21 18:02:37.437949 2026] [security2:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-global": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZms6xBFSwbWxfUieig4cwAAAAM"] [Sat Feb 21 18:02:37.438005 2026] [security2:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-ip": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZms6xBFSwbWxfUieig4cwAAAAM"] [Sat Feb 21 18:02:37.503665 2026] [proxy_fcgi:error] [pid 2170028:tid 2170028] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:37.986440 2026] [proxy_fcgi:error] [pid 2179060:tid 2179060] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:38.230992 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:38.472612 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:38.728779 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:38.974051 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:39.461805 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:39.703194 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:39.944887 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:40.204270 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:40.449121 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:40.697975 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:41.240998 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:41.488287 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:41.731051 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:41.910701 2026] [autoindex:error] [pid 2173288:tid 2173288] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:02:42.002118 2026] [proxy_fcgi:error] [pid 2179060:tid 2179060] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:42.567915 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:42.867052 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/local/.env"] [unique_id "aZms8ilg3Lw1204iizmE7wAAAAg"] [Sat Feb 21 18:02:43.596762 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:43.597283 2026] [security2:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aZms8x09CmUltJs1PthY0QAAAAE"] [Sat Feb 21 18:02:43.597327 2026] [security2:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aZms8x09CmUltJs1PthY0QAAAAE"] [Sat Feb 21 18:02:43.701631 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/local/.env"] [unique_id "aZms82V54eR_jh_j4D-62QAAAAo"] [Sat Feb 21 18:02:43.858156 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:44.100354 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:44.342621 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:44.584591 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:45.005192 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/application/.env"] [unique_id "aZms9Zpe9KOFdAtIQx5kvgAAAAw"] [Sat Feb 21 18:02:45.066767 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:45.578540 2026] [proxy_fcgi:error] [pid 2170028:tid 2170028] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:45.787719 2026] [security2:error] [pid 2167082:tid 2167082] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/application/.env"] [unique_id "aZms9a4igNZqZ6eKtslS-QAAAAU"] [Sat Feb 21 18:02:45.820354 2026] [proxy_fcgi:error] [pid 2170028:tid 2170028] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:46.307399 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:47.529735 2026] [proxy_fcgi:error] [pid 2167082:tid 2167082] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:47.783526 2026] [proxy_fcgi:error] [pid 2167082:tid 2167082] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:48.024575 2026] [security2:error] [pid 2167082:tid 2167082] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/css/index.php"] [unique_id "aZms-K4igNZqZ6eKtslS_QAAAAU"] [Sat Feb 21 18:02:48.024618 2026] [security2:error] [pid 2167082:tid 2167082] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/css/index.php"] [unique_id "aZms-K4igNZqZ6eKtslS_QAAAAU"] [Sat Feb 21 18:02:48.265509 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:48.521694 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:48.765777 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:48.931035 2026] [security2:error] [pid 2170028:tid 2170028] [client 47.128.16.130:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/contact-form-7/includes/css/styles.css"] [unique_id "aZms-P_5kngxRGoMXipM4QAAAAY"], referer: https://arcticairandrefrigeration.com/ourservices/testing-audits/ [Sat Feb 21 18:02:48.931107 2026] [security2:error] [pid 2170028:tid 2170028] [client 47.128.16.130:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/contact-form-7/includes/css/styles.css"] [unique_id "aZms-P_5kngxRGoMXipM4QAAAAY"], referer: https://arcticairandrefrigeration.com/ourservices/testing-audits/ [Sat Feb 21 18:02:49.007162 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:49.248560 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:49.490790 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:49.698188 2026] [autoindex:error] [pid 2178036:tid 2178036] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:02:49.732537 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:50.460643 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:50.703404 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:51.050837 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/config/settings.ini"] [unique_id "aZms-9pGmemyPzimpI2cQAAAAAA"] [Sat Feb 21 18:02:51.190508 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:51.932631 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/config/settings.ini"] [unique_id "aZms-z1ptPcqn_sBRBettwAAAAc"] [Sat Feb 21 18:02:51.975311 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:52.439614 2026] [security2:error] [pid 2179060:tid 2179060] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZms-ylg3Lw1204iizmE_AAAAAg"] [Sat Feb 21 18:02:52.439708 2026] [security2:error] [pid 2179060:tid 2179060] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZms-ylg3Lw1204iizmE_AAAAAg"] [Sat Feb 21 18:02:52.460561 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:52.954663 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:53.173314 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/env/.env"] [unique_id "aZms_fPgItFgXMKgTSvhyQAAAAk"] [Sat Feb 21 18:02:53.391296 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:53.632492 2026] [security2:error] [pid 2170028:tid 2170028] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZms-__5kngxRGoMXipM6gAAAAY"] [Sat Feb 21 18:02:53.632547 2026] [security2:error] [pid 2170028:tid 2170028] [client 20.214.157.214:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZms-__5kngxRGoMXipM6gAAAAY"] [Sat Feb 21 18:02:53.923322 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/env/.env"] [unique_id "aZms_f_5kngxRGoMXipM6wAAAAY"] [Sat Feb 21 18:02:54.653699 2026] [proxy_fcgi:error] [pid 2179060:tid 2179060] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:54.910789 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:55.158407 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:55.200763 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/new/.env"] [unique_id "aZms__PgItFgXMKgTSvhzAAAAAk"] [Sat Feb 21 18:02:55.652579 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:55.893814 2026] [proxy_fcgi:error] [pid 2167082:tid 2167082] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:55.956899 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/new/.env"] [unique_id "aZms_z1ptPcqn_sBRBetugAAAAc"] [Sat Feb 21 18:02:56.288232 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:56.772168 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:57.032010 2026] [proxy_fcgi:error] [pid 2167082:tid 2167082] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:57.088804 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/new/.env.local"] [unique_id "aZmtAdpGmemyPzimpI2cSAAAAAA"] [Sat Feb 21 18:02:57.251135 2026] [autoindex:error] [pid 2170028:tid 2170028] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:02:57.273907 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:57.756218 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:58.229720 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:58.250610 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/new/.env.local"] [unique_id "aZmtAh09CmUltJs1PthY6QAAAAE"] [Sat Feb 21 18:02:58.478705 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:58.725476 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:59.224539 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:59.482351 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/new/.env.production"] [unique_id "aZmtA1AuKWjBndpBvNwViAAAAAQ"] [Sat Feb 21 18:02:59.707495 2026] [proxy_fcgi:error] [pid 2179060:tid 2179060] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:02:59.949608 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:00.266982 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/new/.env.production"] [unique_id "aZmtBJpe9KOFdAtIQx5k0QAAAAw"] [Sat Feb 21 18:03:00.757321 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:01.008134 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:01.251432 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:01.578388 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/new/.env.staging"] [unique_id "aZmtBWV54eR_jh_j4D-6-gAAAAo"] [Sat Feb 21 18:03:01.735458 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:02.014723 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:02.277386 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:02.492144 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/new/.env.staging"] [unique_id "aZmtBvPgItFgXMKgTSvh2gAAAAk"] [Sat Feb 21 18:03:02.539519 2026] [proxy_fcgi:error] [pid 2179060:tid 2179060] [client 52.231.66.246:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:03:02.539530 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtBppe9KOFdAtIQx5k0wAAAAw"] [Sat Feb 21 18:03:02.539607 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtBppe9KOFdAtIQx5k0wAAAAw"] [Sat Feb 21 18:03:03.592229 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtBxBFSwbWxfUieig4qgAAAAM"] [Sat Feb 21 18:03:03.592310 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtBxBFSwbWxfUieig4qgAAAAM"] [Sat Feb 21 18:03:04.923757 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtCPPgItFgXMKgTSvh3AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi [Sat Feb 21 18:03:04.923828 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtCPPgItFgXMKgTSvh3AAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fbdi [Sat Feb 21 18:03:13.068725 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/awstats/.env"] [unique_id "aZmtEf_5kngxRGoMXipNBwAAAAY"] [Sat Feb 21 18:03:13.837362 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /awstats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/awstats/.env"] [unique_id "aZmtESlg3Lw1204iizmFHAAAAAg"] [Sat Feb 21 18:03:15.062045 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/conf/.env"] [unique_id "aZmtExBFSwbWxfUieig4vAAAAAM"] [Sat Feb 21 18:03:15.915958 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /conf/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/conf/.env"] [unique_id "aZmtE3R5aF-0Eejvpr9goQAAAA0"] [Sat Feb 21 18:03:17.172634 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cron/.env"] [unique_id "aZmtFdpGmemyPzimpI2caAAAAAA"] [Sat Feb 21 18:03:17.986593 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cron/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cron/.env"] [unique_id "aZmtFfPgItFgXMKgTSvh7gAAAAk"] [Sat Feb 21 18:03:19.123793 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/www/.env"] [unique_id "aZmtFxBFSwbWxfUieig4vwAAAAM"] [Sat Feb 21 18:03:19.956853 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/www/.env"] [unique_id "aZmtF3R5aF-0Eejvpr9gpwAAAA0"] [Sat Feb 21 18:03:21.149470 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtGFAuKWjBndpBvNwVrQAAAAQ"] [Sat Feb 21 18:03:21.149550 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtGFAuKWjBndpBvNwVrQAAAAQ"] [Sat Feb 21 18:03:21.225885 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/app/.env"] [unique_id "aZmtGf_5kngxRGoMXipNEwAAAAY"] [Sat Feb 21 18:03:21.306725 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 40.70.244.161:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/plugins/fix/up.php [Sat Feb 21 18:03:22.198983 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/app/.env"] [unique_id "aZmtGmV54eR_jh_j4D-7EwAAAAo"] [Sat Feb 21 18:03:22.312217 2026] [access_compat:error] [pid 2170028:tid 2170028] [client 40.70.244.161:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-content/plugins/fix/up.php [Sat Feb 21 18:03:23.380556 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/env.backup"] [unique_id "aZmtGylg3Lw1204iizmFJgAAAAg"] [Sat Feb 21 18:03:23.869627 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtG5pe9KOFdAtIQx5k7wAAAAw"] [Sat Feb 21 18:03:23.869707 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtG5pe9KOFdAtIQx5k7wAAAAw"] [Sat Feb 21 18:03:24.154257 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/env.backup"] [unique_id "aZmtHB09CmUltJs1PthZDgAAAAE"] [Sat Feb 21 18:03:29.094899 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtIB09CmUltJs1PthZFAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 18:03:29.094985 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtIB09CmUltJs1PthZFAAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice [Sat Feb 21 18:03:33.445757 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/js/.env"] [unique_id "aZmtJT1ptPcqn_sBRBet8wAAAAc"] [Sat Feb 21 18:03:34.332196 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/js/.env"] [unique_id "aZmtJilg3Lw1204iizmFNwAAAAg"] [Sat Feb 21 18:03:35.549795 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/core/.env"] [unique_id "aZmtJz1ptPcqn_sBRBet9gAAAAc"] [Sat Feb 21 18:03:36.347564 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/core/.env"] [unique_id "aZmtKP_5kngxRGoMXipNJAAAAAY"] [Sat Feb 21 18:03:37.575831 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/nginx/.env"] [unique_id "aZmtKXR5aF-0Eejvpr9gwgAAAA0"] [Sat Feb 21 18:03:38.393616 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/nginx/.env"] [unique_id "aZmtKmV54eR_jh_j4D-7JQAAAAo"] [Sat Feb 21 18:03:38.779233 2026] [autoindex:error] [pid 2174419:tid 2174419] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:03:39.570625 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/site/.env"] [unique_id "aZmtK_PgItFgXMKgTSviEgAAAAk"] [Sat Feb 21 18:03:40.333376 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/site/.env"] [unique_id "aZmtLJpe9KOFdAtIQx5lAwAAAAw"] [Sat Feb 21 18:03:41.424383 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmtLJpe9KOFdAtIQx5lAwAAAAw"] [Sat Feb 21 18:03:41.424461 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmtLJpe9KOFdAtIQx5lAwAAAAw"] [Sat Feb 21 18:03:41.492675 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/xampp/.env"] [unique_id "aZmtLdpGmemyPzimpI2ciQAAAAA"] [Sat Feb 21 18:03:42.365978 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xampp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/xampp/.env"] [unique_id "aZmtLppe9KOFdAtIQx5lBQAAAAw"] [Sat Feb 21 18:03:43.653557 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aZmtL3e2RSgv5splKwnsSAAAAAI"] [Sat Feb 21 18:03:44.525254 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.docker/laravel/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.docker/laravel/app/.env"] [unique_id "aZmtMJpe9KOFdAtIQx5lBwAAAAw"] [Sat Feb 21 18:03:45.760158 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/.env.local"] [unique_id "aZmtMfPgItFgXMKgTSviGQAAAAk"] [Sat Feb 21 18:03:46.433288 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtMq4igNZqZ6eKtslTVgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:03:46.433404 2026] [security2:error] [pid 2167082:tid 2167082] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtMq4igNZqZ6eKtslTVgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:03:46.606664 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/.env.local"] [unique_id "aZmtMj1ptPcqn_sBRBeuBwAAAAc"] [Sat Feb 21 18:03:47.945917 2026] [security2:error] [pid 2179060:tid 2179060] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/.env.production"] [unique_id "aZmtMylg3Lw1204iizmFSwAAAAg"] [Sat Feb 21 18:03:48.648525 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:03:48.715787 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/.env.production"] [unique_id "aZmtNFAuKWjBndpBvNwV2QAAAAQ"] [Sat Feb 21 18:03:49.894442 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/.env.staging"] [unique_id "aZmtNZpe9KOFdAtIQx5lDwAAAAw"] [Sat Feb 21 18:03:50.645520 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmtNZpe9KOFdAtIQx5lDwAAAAw"] [Sat Feb 21 18:03:50.645596 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmtNZpe9KOFdAtIQx5lDwAAAAw"] [Sat Feb 21 18:03:50.650508 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:03:50.691885 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/.env.staging"] [unique_id "aZmtNmV54eR_jh_j4D-7NwAAAAo"] [Sat Feb 21 18:03:51.276302 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtN5pe9KOFdAtIQx5lEAAAAAw"] [Sat Feb 21 18:03:51.276375 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtN5pe9KOFdAtIQx5lEAAAAAw"] [Sat Feb 21 18:03:51.869156 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/core/.env.local"] [unique_id "aZmtN1AuKWjBndpBvNwV3QAAAAQ"] [Sat Feb 21 18:03:52.455959 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtOJpe9KOFdAtIQx5lEgAAAAw"] [Sat Feb 21 18:03:52.456052 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtOJpe9KOFdAtIQx5lEgAAAAw"] [Sat Feb 21 18:03:52.620849 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/core/.env.local"] [unique_id "aZmtOPPgItFgXMKgTSviIAAAAAk"] [Sat Feb 21 18:03:54.171237 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/core/.env.production"] [unique_id "aZmtOne2RSgv5splKwnsUgAAAAI"] [Sat Feb 21 18:03:54.318877 2026] [access_compat:error] [pid 2182178:tid 2182178] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:03:54.943346 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/core/.env.production"] [unique_id "aZmtOj1ptPcqn_sBRBeuEgAAAAc"] [Sat Feb 21 18:03:56.164637 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/laravel/core/.env.staging"] [unique_id "aZmtPB09CmUltJs1PthZOQAAAAE"] [Sat Feb 21 18:03:56.982436 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/core/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/laravel/core/.env.staging"] [unique_id "aZmtPGV54eR_jh_j4D-7OwAAAAo"] [Sat Feb 21 18:03:58.054570 2026] [security2:error] [pid 2173288:tid 2173288] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-global": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/index.php/function.php"] [unique_id "aZmtPPPgItFgXMKgTSviIgAAAAk"] [Sat Feb 21 18:03:58.054704 2026] [security2:error] [pid 2173288:tid 2173288] [client 52.172.248.2:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/osprify-ip": Permission denied [hostname "osprify.com"] [uri "/cgi-sys/ea-php83/index.php/function.php"] [unique_id "aZmtPPPgItFgXMKgTSviIgAAAAk"] [Sat Feb 21 18:03:58.133552 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/main/.env"] [unique_id "aZmtPnR5aF-0Eejvpr9g3QAAAA0"] [Sat Feb 21 18:03:59.042646 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/main/.env"] [unique_id "aZmtP_PgItFgXMKgTSviIwAAAAk"] [Sat Feb 21 18:04:02.285124 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/app/private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/storage/app/private/.env"] [unique_id "aZmtQj1ptPcqn_sBRBeuFgAAAAc"] [Sat Feb 21 18:04:03.089751 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/app/private/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/storage/app/private/.env"] [unique_id "aZmtQx09CmUltJs1PthZPQAAAAE"] [Sat Feb 21 18:04:04.343221 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/storage/logs/laravel.log"] [unique_id "aZmtRFAuKWjBndpBvNwV6QAAAAQ"] [Sat Feb 21 18:04:05.016746 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtRP_5kngxRGoMXipNOQAAAAY"] [Sat Feb 21 18:04:05.016826 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtRP_5kngxRGoMXipNOQAAAAY"] [Sat Feb 21 18:04:05.204560 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/storage/logs/laravel.log"] [unique_id "aZmtRRkAl6OMpCrcLcxsBwAAAAs"] [Sat Feb 21 18:04:06.494201 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/composer.lock"] [unique_id "aZmtRhBFSwbWxfUieig49gAAAAM"] [Sat Feb 21 18:04:07.359412 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtRx09CmUltJs1PthZRAAAAAE"] [Sat Feb 21 18:04:07.359486 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtRx09CmUltJs1PthZRAAAAAE"] [Sat Feb 21 18:04:07.410577 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/composer.lock" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.lock found within REQUEST_FILENAME: /composer.lock"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/composer.lock"] [unique_id "aZmtR3e2RSgv5splKwnsWAAAAAI"] [Sat Feb 21 18:04:08.729063 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/server.key"] [unique_id "aZmtSBBFSwbWxfUieig4-QAAAAM"] [Sat Feb 21 18:04:09.661250 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/server.key"] [unique_id "aZmtSXe2RSgv5splKwnsWgAAAAI"] [Sat Feb 21 18:04:12.658283 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/php5.ini"] [unique_id "aZmtTHR5aF-0Eejvpr9g7QAAAA0"] [Sat Feb 21 18:04:13.555755 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/php5.ini"] [unique_id "aZmtTXe2RSgv5splKwnsYQAAAAI"] [Sat Feb 21 18:04:14.849802 2026] [security2:error] [pid 2160629:tid 2160629] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmtTmV54eR_jh_j4D-7TwAAAAo"] [Sat Feb 21 18:04:17.672924 2026] [security2:error] [pid 2170028:tid 2170028] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/profile" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/profile found within ARGS:path: /etc/profile.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmtUf_5kngxRGoMXipNTwAAAAY"] [Sat Feb 21 18:04:26.095898 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtWT1ptPcqn_sBRBeuOQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 18:04:26.095958 2026] [security2:error] [pid 2117316:tid 2117316] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtWT1ptPcqn_sBRBeuOQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 18:04:27.386377 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php.bak"] [unique_id "aZmtW3R5aF-0Eejvpr9g_QAAAA0"] [Sat Feb 21 18:04:28.293928 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.php.bak"] [unique_id "aZmtXP_5kngxRGoMXipNXQAAAAY"] [Sat Feb 21 18:04:31.375178 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php.backup"] [unique_id "aZmtX9pGmemyPzimpI2cxQAAAAA"] [Sat Feb 21 18:04:32.170556 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.php.backup"] [unique_id "aZmtYJpe9KOFdAtIQx5lQQAAAAw"] [Sat Feb 21 18:04:37.503516 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/config.ini"] [unique_id "aZmtZVAuKWjBndpBvNwWFQAAAAQ"] [Sat Feb 21 18:04:38.348381 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/config.ini"] [unique_id "aZmtZhszwEQRNwwyr8GJbgAAAAU"] [Sat Feb 21 18:04:41.395697 2026] [security2:error] [pid 2170028:tid 2170028] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/.aws/credentials.bak"] [unique_id "aZmtaf_5kngxRGoMXipNbQAAAAY"] [Sat Feb 21 18:04:42.123661 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/.aws/credentials.bak"] [unique_id "aZmtatpGmemyPzimpI2c0wAAAAA"] [Sat Feb 21 18:04:43.332562 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/credentials/admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.aws/credentials/admin/.env"] [unique_id "aZmta_PgItFgXMKgTSviUAAAAAk"] [Sat Feb 21 18:04:44.086355 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/credentials/admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.aws/credentials/admin/.env"] [unique_id "aZmtbHR5aF-0Eejvpr9hFgAAAA0"] [Sat Feb 21 18:04:45.233452 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmtbHR5aF-0Eejvpr9hFgAAAA0"] [Sat Feb 21 18:04:45.233529 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmtbHR5aF-0Eejvpr9hFgAAAA0"] [Sat Feb 21 18:04:47.317138 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/.bak"] [unique_id "aZmtbz1ptPcqn_sBRBeuUwAAAAc"] [Sat Feb 21 18:04:48.062603 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/.bak"] [unique_id "aZmtcB09CmUltJs1PthZewAAAAE"] [Sat Feb 21 18:04:51.248672 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.bitbucket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.bitbucket/.env"] [unique_id "aZmtc2V54eR_jh_j4D-7gQAAAAo"] [Sat Feb 21 18:04:51.983441 2026] [security2:error] [pid 2182703:tid 2182703] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmtchszwEQRNwwyr8GJgwAAAAU"] [Sat Feb 21 18:04:51.983488 2026] [security2:error] [pid 2182703:tid 2182703] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmtchszwEQRNwwyr8GJgwAAAAU"] [Sat Feb 21 18:04:52.027440 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.bitbucket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.bitbucket/.env"] [unique_id "aZmtdD1ptPcqn_sBRBeuWQAAAAc"] [Sat Feb 21 18:04:56.823404 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "aZmteJpe9KOFdAtIQx5lXgAAAAw"] [Sat Feb 21 18:04:57.648849 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.c9/metadata/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "aZmteXe2RSgv5splKwnslwAAAAI"] [Sat Feb 21 18:04:58.935949 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.circleci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.circleci/.env"] [unique_id "aZmtenR5aF-0Eejvpr9hKwAAAA0"] [Sat Feb 21 18:04:59.796944 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.circleci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.circleci/.env"] [unique_id "aZmte9pGmemyPzimpI2c5AAAAAA"] [Sat Feb 21 18:05:02.251120 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtfh09CmUltJs1PthZjQAAAAE"] [Sat Feb 21 18:05:02.251212 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtfh09CmUltJs1PthZjQAAAAE"] [Sat Feb 21 18:05:06.320190 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env-db"] [unique_id "aZmtgmV54eR_jh_j4D-7mQAAAAo"] [Sat Feb 21 18:05:06.618733 2026] [autoindex:error] [pid 2124119:tid 2124119] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:05:07.248556 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env-db"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env-db"] [unique_id "aZmtgz1ptPcqn_sBRBeucAAAAAc"] [Sat Feb 21 18:05:08.132885 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:08.377753 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:08.391707 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.back"] [unique_id "aZmthB09CmUltJs1PthZlgAAAAE"] [Sat Feb 21 18:05:08.642124 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:09.029410 2026] [proxy_fcgi:error] [pid 2170028:tid 2170028] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:09.304458 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:09.319886 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.back"] [unique_id "aZmthWV54eR_jh_j4D-7nQAAAAo"] [Sat Feb 21 18:05:09.577721 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:09.793023 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmthXR5aF-0Eejvpr9hOgAAAA0"] [Sat Feb 21 18:05:09.793140 2026] [security2:error] [pid 2174419:tid 2174419] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmthXR5aF-0Eejvpr9hOgAAAA0"] [Sat Feb 21 18:05:09.821747 2026] [proxy_fcgi:error] [pid 2170028:tid 2170028] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:10.075380 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:10.330538 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:10.583305 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:10.697174 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bkp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.bkp"] [unique_id "aZmthvPgItFgXMKgTSvifgAAAAk"] [Sat Feb 21 18:05:10.836294 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:11.281196 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:11.529867 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:11.614097 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bkp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.bkp"] [unique_id "aZmthxBFSwbWxfUieig5PwAAAAM"] [Sat Feb 21 18:05:11.773787 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:12.019455 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:12.580414 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:12.760002 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:05:12.817393 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.credentials"] [unique_id "aZmtiJpe9KOFdAtIQx5leQAAAAw"] [Sat Feb 21 18:05:12.835411 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:13.078141 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:13.320355 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:13.564338 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:13.616859 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.credentials"] [unique_id "aZmtiXe2RSgv5splKwnsqAAAAAI"] [Sat Feb 21 18:05:13.813005 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:14.091493 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:14.319602 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:05:14.340647 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:14.603586 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:14.846157 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:15.004504 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.email"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.email"] [unique_id "aZmti-sh5b52zp_h1qZr-gAAAAg"] [Sat Feb 21 18:05:15.104111 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:15.490886 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:15.734472 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:15.863288 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.email"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.email"] [unique_id "aZmtixkAl6OMpCrcLcxsUgAAAAs"] [Sat Feb 21 18:05:15.977891 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:16.230983 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:16.475021 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:16.731429 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:16.986765 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:17.168428 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hidden"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.hidden"] [unique_id "aZmtjfPgItFgXMKgTSviigAAAAk"] [Sat Feb 21 18:05:18.049746 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:18.050571 2026] [security2:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/1.php"] [unique_id "aZmtjppe9KOFdAtIQx5lggAAAAw"] [Sat Feb 21 18:05:18.052249 2026] [security2:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/1.php"] [unique_id "aZmtjppe9KOFdAtIQx5lggAAAAw"] [Sat Feb 21 18:05:18.212868 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hidden"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.hidden"] [unique_id "aZmtjhkAl6OMpCrcLcxsVQAAAAs"] [Sat Feb 21 18:05:18.547443 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:18.586031 2026] [autoindex:error] [pid 2178345:tid 2178345] [client 52.172.248.2:0] AH01276: Cannot serve directory /home/osprify/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:05:18.795440 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:19.049520 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:19.134015 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtj5pe9KOFdAtIQx5lhQAAAAw"] [Sat Feb 21 18:05:19.134089 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtj5pe9KOFdAtIQx5lhQAAAAw"] [Sat Feb 21 18:05:19.294175 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:19.387476 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hide"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.hide"] [unique_id "aZmtj_PgItFgXMKgTSvijQAAAAk"] [Sat Feb 21 18:05:19.539079 2026] [proxy_fcgi:error] [pid 2184384:tid 2184384] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:19.781862 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:20.194548 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.hide"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.hide"] [unique_id "aZmtkBszwEQRNwwyr8GJtQAAAAU"] [Sat Feb 21 18:05:20.380649 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:21.577939 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.js"] [unique_id "aZmtkesh5b52zp_h1qZsAwAAAAg"] [Sat Feb 21 18:05:21.822398 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:22.067149 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:22.382158 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.js"] [unique_id "aZmtkh09CmUltJs1PthZrgAAAAE"] [Sat Feb 21 18:05:22.478485 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:23.591807 2026] [security2:error] [pid 2184534:tid 2184534] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtkzCqcBI0DQh3LBJCTgAAAAY"] [Sat Feb 21 18:05:23.591921 2026] [security2:error] [pid 2184534:tid 2184534] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtkzCqcBI0DQh3LBJCTgAAAAY"] [Sat Feb 21 18:05:23.624300 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.key"] [unique_id "aZmtk5pe9KOFdAtIQx5ljgAAAAw"] [Sat Feb 21 18:05:23.986669 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:24.230404 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:24.485505 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:24.544725 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.key"] [unique_id "aZmtlD1ptPcqn_sBRBeujwAAAAc"] [Sat Feb 21 18:05:24.737946 2026] [proxy_fcgi:error] [pid 2178036:tid 2178036] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:24.999724 2026] [proxy_fcgi:error] [pid 2184534:tid 2184534] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:25.494018 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:25.739149 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:25.867622 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.mail"] [unique_id "aZmtlfPgItFgXMKgTSvimQAAAAk"] [Sat Feb 21 18:05:25.982144 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:26.240433 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:26.483925 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:26.741743 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.mail"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.mail"] [unique_id "aZmtlmV54eR_jh_j4D-7ugAAAAo"] [Sat Feb 21 18:05:26.995593 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:27.248430 2026] [proxy_fcgi:error] [pid 2174419:tid 2174419] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:27.736483 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:27.926177 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.smtp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.smtp"] [unique_id "aZmtl3e2RSgv5splKwnsuwAAAAI"] [Sat Feb 21 18:05:27.980000 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:28.223845 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:28.729963 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:28.833132 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.smtp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.smtp"] [unique_id "aZmtmBszwEQRNwwyr8GJwAAAAAU"] [Sat Feb 21 18:05:29.008049 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:29.252392 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:29.515431 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:29.772704 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:29.820069 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtmdpGmemyPzimpI2dEQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 18:05:29.820189 2026] [security2:error] [pid 2095811:tid 2095811] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtmdpGmemyPzimpI2dEQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 18:05:30.026386 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:30.078141 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.swp"] [unique_id "aZmtmppe9KOFdAtIQx5llQAAAAw"] [Sat Feb 21 18:05:30.272697 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:30.806326 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:31.056857 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:31.307674 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.swp"] [unique_id "aZmtmzCqcBI0DQh3LBJCVwAAAAY"] [Sat Feb 21 18:05:31.572700 2026] [proxy_fcgi:error] [pid 2117316:tid 2117316] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:32.056662 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:32.057359 2026] [security2:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/wp-file.php"] [unique_id "aZmtnGV54eR_jh_j4D-7xAAAAAo"] [Sat Feb 21 18:05:32.057394 2026] [security2:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/wp-file.php"] [unique_id "aZmtnGV54eR_jh_j4D-7xAAAAAo"] [Sat Feb 21 18:05:32.310194 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:32.590326 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.testing"] [unique_id "aZmtnGV54eR_jh_j4D-7xQAAAAo"] [Sat Feb 21 18:05:33.395123 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.testing"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.testing"] [unique_id "aZmtnZpe9KOFdAtIQx5lmQAAAAw"] [Sat Feb 21 18:05:34.208638 2026] [proxy_fcgi:error] [pid 2184534:tid 2184534] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:34.461121 2026] [proxy_fcgi:error] [pid 2124119:tid 2124119] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:34.555926 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.uat"] [unique_id "aZmtnhkAl6OMpCrcLcxsawAAAAs"] [Sat Feb 21 18:05:34.715615 2026] [proxy_fcgi:error] [pid 2184384:tid 2184384] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:34.969355 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:35.212270 2026] [proxy_fcgi:error] [pid 2184384:tid 2184384] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:35.377849 2026] [security2:error] [pid 2095811:tid 2095811] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.uat"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.uat"] [unique_id "aZmtn9pGmemyPzimpI2dGgAAAAA"] [Sat Feb 21 18:05:35.472134 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:35.971720 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:36.246707 2026] [proxy_fcgi:error] [pid 2184534:tid 2184534] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:36.508750 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:36.509564 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-global": Permission denied [hostname "brightway.com.pk"] [uri "/tmpls.php"] [unique_id "aZmtoFAuKWjBndpBvNwWXgAAAAQ"] [Sat Feb 21 18:05:36.509644 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightwaypk-ip": Permission denied [hostname "brightway.com.pk"] [uri "/tmpls.php"] [unique_id "aZmtoFAuKWjBndpBvNwWXgAAAAQ"] [Sat Feb 21 18:05:36.692457 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_aws"] [unique_id "aZmtoDCqcBI0DQh3LBJCXwAAAAY"] [Sat Feb 21 18:05:36.774433 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:37.274871 2026] [proxy_fcgi:error] [pid 2184384:tid 2184384] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:37.524642 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:37.535927 2026] [security2:error] [pid 2117316:tid 2117316] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_aws"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_aws"] [unique_id "aZmtoT1ptPcqn_sBRBeuowAAAAc"] [Sat Feb 21 18:05:37.777362 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:38.038384 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:38.281066 2026] [proxy_fcgi:error] [pid 2182703:tid 2182703] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:38.683751 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_backup"] [unique_id "aZmtonR5aF-0Eejvpr9hbwAAAA0"] [Sat Feb 21 18:05:38.930876 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:39.182218 2026] [proxy_fcgi:error] [pid 2160629:tid 2160629] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:39.482383 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_backup"] [unique_id "aZmtozCqcBI0DQh3LBJCYwAAAAY"] [Sat Feb 21 18:05:40.160818 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:40.655703 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_copy"] [unique_id "aZmtpHe2RSgv5splKwns0AAAAAI"] [Sat Feb 21 18:05:40.920529 2026] [proxy_fcgi:error] [pid 2184534:tid 2184534] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:41.522742 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_copy"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_copy"] [unique_id "aZmtpesh5b52zp_h1qZsIwAAAAg"] [Sat Feb 21 18:05:41.923497 2026] [proxy_fcgi:error] [pid 2178345:tid 2178345] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:41.968211 2026] [security2:error] [pid 2124119:tid 2124119] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmtpBBFSwbWxfUieig5bQAAAAM"] [Sat Feb 21 18:05:41.968290 2026] [security2:error] [pid 2124119:tid 2124119] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmtpBBFSwbWxfUieig5bQAAAAM"] [Sat Feb 21 18:05:42.705257 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_private"] [unique_id "aZmtpjCqcBI0DQh3LBJCZwAAAAY"] [Sat Feb 21 18:05:42.756413 2026] [proxy_fcgi:error] [pid 2182178:tid 2182178] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:42.802554 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:05:43.257773 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:43.400499 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtpx09CmUltJs1PthZzQAAAAE"] [Sat Feb 21 18:05:43.400589 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtpx09CmUltJs1PthZzQAAAAE"] [Sat Feb 21 18:05:43.480404 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_private"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_private"] [unique_id "aZmtpxszwEQRNwwyr8GJ1gAAAAU"] [Sat Feb 21 18:05:43.543355 2026] [proxy_fcgi:error] [pid 2095811:tid 2095811] [client 104.46.226.22:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:05:44.713711 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env_secret"] [unique_id "aZmtqJpe9KOFdAtIQx5lowAAAAw"] [Sat Feb 21 18:05:45.485613 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env_secret"] [unique_id "aZmtqesh5b52zp_h1qZsJgAAAAg"] [Sat Feb 21 18:05:46.799593 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env~"] [unique_id "aZmtqjCqcBI0DQh3LBJCaQAAAAY"] [Sat Feb 21 18:05:47.644763 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env~"] [unique_id "aZmtq-sh5b52zp_h1qZsJwAAAAg"] [Sat Feb 21 18:05:48.853112 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.git/"] [unique_id "aZmtrB09CmUltJs1PthZ0AAAAAE"] [Sat Feb 21 18:05:49.590043 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.git/"] [unique_id "aZmtrZpe9KOFdAtIQx5lpgAAAAw"] [Sat Feb 21 18:05:50.766895 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.git/config"] [unique_id "aZmtrhkAl6OMpCrcLcxsfAAAAAs"] [Sat Feb 21 18:05:51.534868 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.git/config"] [unique_id "aZmtr_PgItFgXMKgTSvivQAAAAk"] [Sat Feb 21 18:05:51.811571 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:05:52.683875 2026] [security2:error] [pid 2160629:tid 2160629] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.github/.env"] [unique_id "aZmtsGV54eR_jh_j4D-72QAAAAo"] [Sat Feb 21 18:05:53.461480 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.github/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.github/.env"] [unique_id "aZmtsesh5b52zp_h1qZsKgAAAAg"] [Sat Feb 21 18:05:56.428873 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.gitignore"] [unique_id "aZmttBkAl6OMpCrcLcxsgQAAAAs"] [Sat Feb 21 18:05:57.075597 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmttOsh5b52zp_h1qZsLAAAAAg"] [Sat Feb 21 18:05:57.075667 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmttOsh5b52zp_h1qZsLAAAAAg"] [Sat Feb 21 18:05:57.297710 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.gitignore" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.gitignore found within REQUEST_FILENAME: /.gitignore"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.gitignore"] [unique_id "aZmttXR5aF-0Eejvpr9hgwAAAA0"] [Sat Feb 21 18:06:00.628366 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtuOsh5b52zp_h1qZsMwAAAAg"] [Sat Feb 21 18:06:00.628446 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmtuOsh5b52zp_h1qZsMwAAAAg"] [Sat Feb 21 18:06:00.688296 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.gitlab-ci/.env"] [unique_id "aZmtuHe2RSgv5splKwns4wAAAAI"] [Sat Feb 21 18:06:01.681382 2026] [access_compat:error] [pid 2184384:tid 2184384] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/userfuns.php, referer: www.google.com [Sat Feb 21 18:06:01.784505 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab-ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.gitlab-ci/.env"] [unique_id "aZmtuVAuKWjBndpBvNwWdwAAAAQ"] [Sat Feb 21 18:06:03.457962 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.gitlab/.env"] [unique_id "aZmtuxszwEQRNwwyr8GJ6gAAAAU"] [Sat Feb 21 18:06:04.311666 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.gitlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.gitlab/.env"] [unique_id "aZmtvBBFSwbWxfUieig5hAAAAAM"] [Sat Feb 21 18:06:05.566527 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.hg/"] [unique_id "aZmtvXe2RSgv5splKwns6gAAAAI"] [Sat Feb 21 18:06:06.375097 2026] [security2:error] [pid 2185226:tid 2185226] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.hg/"] [unique_id "aZmtvnemTpd0oS9wF-3q3gAAAAA"] [Sat Feb 21 18:06:07.611276 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.idea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.idea/.env"] [unique_id "aZmtvxkAl6OMpCrcLcxskQAAAAs"] [Sat Feb 21 18:06:08.382179 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.idea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.idea/.env"] [unique_id "aZmtwBBFSwbWxfUieig5iQAAAAM"] [Sat Feb 21 18:06:14.845509 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:06:16.204752 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/userfuns.php, referer: www.google.com [Sat Feb 21 18:06:17.532110 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:06:24.857453 2026] [security2:error] [pid 2182178:tid 2182178] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt0BkAl6OMpCrcLcxsnwAAAAs"] [Sat Feb 21 18:06:24.857531 2026] [security2:error] [pid 2182178:tid 2182178] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt0BkAl6OMpCrcLcxsnwAAAAs"] [Sat Feb 21 18:06:27.866581 2026] [security2:error] [pid 2182178:tid 2182178] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmt0hkAl6OMpCrcLcxsowAAAAs"] [Sat Feb 21 18:06:27.866654 2026] [security2:error] [pid 2182178:tid 2182178] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmt0hkAl6OMpCrcLcxsowAAAAs"] [Sat Feb 21 18:06:29.887017 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt1esh5b52zp_h1qZsUgAAAAg"] [Sat Feb 21 18:06:29.887124 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt1esh5b52zp_h1qZsUgAAAAg"] [Sat Feb 21 18:06:30.530462 2026] [security2:error] [pid 2182178:tid 2182178] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt1hkAl6OMpCrcLcxspgAAAAs"] [Sat Feb 21 18:06:30.530553 2026] [security2:error] [pid 2182178:tid 2182178] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt1hkAl6OMpCrcLcxspgAAAAs"] [Sat Feb 21 18:06:32.083936 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.svn/"] [unique_id "aZmt2BszwEQRNwwyr8GKCwAAAAU"] [Sat Feb 21 18:06:32.963263 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.svn/"] [unique_id "aZmt2B09CmUltJs1PthZ-AAAAAE"] [Sat Feb 21 18:06:35.566142 2026] [access_compat:error] [pid 2174419:tid 2174419] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/postnews.php, referer: www.google.com [Sat Feb 21 18:06:35.731593 2026] [security2:error] [pid 2182178:tid 2182178] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt2xkAl6OMpCrcLcxssAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0 [Sat Feb 21 18:06:35.731704 2026] [security2:error] [pid 2182178:tid 2182178] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt2xkAl6OMpCrcLcxssAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0 [Sat Feb 21 18:06:37.296468 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt3R09CmUltJs1PthZ_QAAAAE"] [Sat Feb 21 18:06:37.296554 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt3R09CmUltJs1PthZ_QAAAAE"] [Sat Feb 21 18:06:46.955799 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt5ppe9KOFdAtIQx5l6wAAAAw"] [Sat Feb 21 18:06:46.955875 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt5ppe9KOFdAtIQx5l6wAAAAw"] [Sat Feb 21 18:06:51.754365 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt6x09CmUltJs1PthaGAAAAAE"] [Sat Feb 21 18:06:51.754518 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt6x09CmUltJs1PthaGAAAAAE"] [Sat Feb 21 18:06:52.796332 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aZmt7BkAl6OMpCrcLcxsxQAAAAs"] [Sat Feb 21 18:06:53.719324 2026] [security2:error] [pid 2185226:tid 2185226] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aZmt7XemTpd0oS9wF-3rGQAAAAA"] [Sat Feb 21 18:06:54.890925 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "aZmt7ush5b52zp_h1qZsdAAAAAg"] [Sat Feb 21 18:06:55.656574 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /07-accessing-data/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "aZmt7xBFSwbWxfUieig5ywAAAAM"] [Sat Feb 21 18:06:55.694995 2026] [access_compat:error] [pid 2185226:tid 2185226] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/postnews.php, referer: www.google.com [Sat Feb 21 18:06:56.761698 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "aZmt8He2RSgv5splKwntKgAAAAI"] [Sat Feb 21 18:06:57.544200 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "aZmt8esh5b52zp_h1qZseAAAAAg"] [Sat Feb 21 18:06:58.814009 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "aZmt8hBFSwbWxfUieig5zwAAAAM"] [Sat Feb 21 18:06:59.585489 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /08-routing/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "aZmt8zCqcBI0DQh3LBJCuAAAAAY"] [Sat Feb 21 18:07:00.524819 2026] [security2:error] [pid 2185226:tid 2185226] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt9HemTpd0oS9wF-3rIAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:07:00.524915 2026] [security2:error] [pid 2185226:tid 2185226] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt9HemTpd0oS9wF-3rIAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:07:00.946306 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "aZmt9B09CmUltJs1PthaJgAAAAE"] [Sat Feb 21 18:07:01.948459 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/begin/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "aZmt9esh5b52zp_h1qZsfgAAAAg"] [Sat Feb 21 18:07:03.398255 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "aZmt9x09CmUltJs1PthaKQAAAAE"] [Sat Feb 21 18:07:04.333995 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /09-managing-state/end/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "aZmt-BBFSwbWxfUieig52AAAAAM"] [Sat Feb 21 18:07:07.547650 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/3-sequelize/final/.env"] [unique_id "aZmt-xszwEQRNwwyr8GKNwAAAAU"] [Sat Feb 21 18:07:08.380260 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /3-sequelize/final/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/3-sequelize/final/.env"] [unique_id "aZmt_PPgItFgXMKgTSvjIgAAAAk"] [Sat Feb 21 18:07:09.716411 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/31_structure_tests/.env"] [unique_id "aZmt_RszwEQRNwwyr8GKOgAAAAU"] [Sat Feb 21 18:07:10.443295 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /31_structure_tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/31_structure_tests/.env"] [unique_id "aZmt_vPgItFgXMKgTSvjJAAAAAk"] [Sat Feb 21 18:07:11.116239 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt_-sh5b52zp_h1qZsjQAAAAg"] [Sat Feb 21 18:07:11.116312 2026] [security2:error] [pid 2184384:tid 2184384] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmt_-sh5b52zp_h1qZsjQAAAAg"] [Sat Feb 21 18:07:15.100017 2026] [security2:error] [pid 2185226:tid 2185226] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuA3emTpd0oS9wF-3rPQAAAAA"] [Sat Feb 21 18:07:15.100084 2026] [security2:error] [pid 2185226:tid 2185226] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuA3emTpd0oS9wF-3rPQAAAAA"] [Sat Feb 21 18:07:18.390925 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuBh09CmUltJs1PthaRAAAAAE"] [Sat Feb 21 18:07:18.391019 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuBh09CmUltJs1PthaRAAAAAE"] [Sat Feb 21 18:07:21.372843 2026] [security2:error] [pid 2174419:tid 2174419] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmuCHR5aF-0Eejvpr9h6AAAAA0"] [Sat Feb 21 18:07:21.372943 2026] [security2:error] [pid 2174419:tid 2174419] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmuCHR5aF-0Eejvpr9h6AAAAA0"] [Sat Feb 21 18:07:22.088209 2026] [access_compat:error] [pid 2178345:tid 2178345] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:07:23.279328 2026] [security2:error] [pid 2173288:tid 2173288] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuC_PgItFgXMKgTSvjPgAAAAk"] [Sat Feb 21 18:07:23.279374 2026] [security2:error] [pid 2173288:tid 2173288] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuC_PgItFgXMKgTSvjPgAAAAk"] [Sat Feb 21 18:07:25.839285 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuDR09CmUltJs1PthaUQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:07:25.839350 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuDR09CmUltJs1PthaUQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:07:27.569286 2026] [security2:error] [pid 2124119:tid 2124119] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase ".profile" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: .profile found within ARGS:file: .profile"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZmuDxBFSwbWxfUieig5_QAAAAM"] [Sat Feb 21 18:07:28.350486 2026] [security2:error] [pid 2174419:tid 2174419] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuEHR5aF-0Eejvpr9h8wAAAA0"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 18:07:28.350546 2026] [security2:error] [pid 2174419:tid 2174419] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuEHR5aF-0Eejvpr9h8wAAAA0"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 18:07:29.746875 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /__tests__/test-become/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/__tests__/test-become/.env"] [unique_id "aZmuERszwEQRNwwyr8GKTgAAAAU"] [Sat Feb 21 18:07:30.596868 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /__tests__/test-become/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/__tests__/test-become/.env"] [unique_id "aZmuEhBFSwbWxfUieig6AQAAAAM"] [Sat Feb 21 18:07:32.024617 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuE1AuKWjBndpBvNwW8QAAAAQ"] [Sat Feb 21 18:07:32.024675 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuE1AuKWjBndpBvNwW8QAAAAQ"] [Sat Feb 21 18:07:37.409841 2026] [security2:error] [pid 2178345:tid 2178345] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuGXe2RSgv5splKwntaAAAAAI"] [Sat Feb 21 18:07:37.409919 2026] [security2:error] [pid 2178345:tid 2178345] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuGXe2RSgv5splKwntaAAAAAI"] [Sat Feb 21 18:07:40.935226 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:07:43.290892 2026] [security2:error] [pid 2186937:tid 2186937] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuHwupZJe_rAqmMz6OMwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg [Sat Feb 21 18:07:43.290991 2026] [security2:error] [pid 2186937:tid 2186937] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuHwupZJe_rAqmMz6OMwAAAAc"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg [Sat Feb 21 18:07:59.965422 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/_static/.env"] [unique_id "aZmuLwupZJe_rAqmMz6OOwAAAAc"] [Sat Feb 21 18:08:00.848236 2026] [security2:error] [pid 2174419:tid 2174419] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/_static/.env"] [unique_id "aZmuMHR5aF-0Eejvpr9iEgAAAA0"] [Sat Feb 21 18:08:04.274968 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/acme-challenge/.env"] [unique_id "aZmuNBszwEQRNwwyr8GKbgAAAAU"] [Sat Feb 21 18:08:05.114078 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme-challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/acme-challenge/.env"] [unique_id "aZmuNVAuKWjBndpBvNwXDAAAAAQ"] [Sat Feb 21 18:08:06.311963 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/acme/.env"] [unique_id "aZmuNvPgItFgXMKgTSvjawAAAAk"] [Sat Feb 21 18:08:07.123493 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/acme/.env"] [unique_id "aZmuNx09CmUltJs1PthafgAAAAE"] [Sat Feb 21 18:08:08.325445 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/acme_challenges/.env"] [unique_id "aZmuODCqcBI0DQh3LBJDAAAAAAY"] [Sat Feb 21 18:08:09.189505 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /acme_challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/acme_challenges/.env"] [unique_id "aZmuOR09CmUltJs1PthafwAAAAE"] [Sat Feb 21 18:08:10.485503 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/actions-server/.env"] [unique_id "aZmuOjCqcBI0DQh3LBJDAQAAAAY"] [Sat Feb 21 18:08:11.290083 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /actions-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/actions-server/.env"] [unique_id "aZmuOxkAl6OMpCrcLcxtJAAAAAs"] [Sat Feb 21 18:08:16.499209 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/admin-app/.env"] [unique_id "aZmuQPPgItFgXMKgTSvjcQAAAAk"] [Sat Feb 21 18:08:16.971595 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:08:17.289597 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/admin-app/.env"] [unique_id "aZmuQTCqcBI0DQh3LBJDBAAAAAY"] [Sat Feb 21 18:08:18.422816 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/admin-panel/.env"] [unique_id "aZmuQh09CmUltJs1PthahAAAAAE"] [Sat Feb 21 18:08:19.221466 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin-panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/admin-panel/.env"] [unique_id "aZmuQwupZJe_rAqmMz6ORQAAAAc"] [Sat Feb 21 18:08:22.923540 2026] [security2:error] [pid 2173288:tid 2173288] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuRvPgItFgXMKgTSvjdgAAAAk"] [Sat Feb 21 18:08:22.923637 2026] [security2:error] [pid 2173288:tid 2173288] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuRvPgItFgXMKgTSvjdgAAAAk"] [Sat Feb 21 18:08:25.262698 2026] [security2:error] [pid 2184534:tid 2184534] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuSTCqcBI0DQh3LBJDDAAAAAY"] [Sat Feb 21 18:08:25.262762 2026] [security2:error] [pid 2184534:tid 2184534] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuSTCqcBI0DQh3LBJDDAAAAAY"] [Sat Feb 21 18:08:26.998457 2026] [authz_core:error] [pid 2184384:tid 2184384] [client 20.214.157.214:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/block-patterns/error_log [Sat Feb 21 18:08:27.790972 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/adminapp/.env"] [unique_id "aZmuS3e2RSgv5splKwntjwAAAAI"] [Sat Feb 21 18:08:27.907963 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuSx09CmUltJs1PthakwAAAAE"] [Sat Feb 21 18:08:27.908019 2026] [security2:error] [pid 2178036:tid 2178036] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuSx09CmUltJs1PthakwAAAAE"] [Sat Feb 21 18:08:28.573411 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/adminapp/.env"] [unique_id "aZmuTBszwEQRNwwyr8GKgQAAAAU"] [Sat Feb 21 18:08:31.834017 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/adminer/.env"] [unique_id "aZmuT5pe9KOFdAtIQx5mbAAAAAw"] [Sat Feb 21 18:08:32.624870 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/adminer/.env"] [unique_id "aZmuUAupZJe_rAqmMz6OUwAAAAc"] [Sat Feb 21 18:08:35.709993 2026] [access_compat:error] [pid 2182703:tid 2182703] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:08:38.297147 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/agora/.env"] [unique_id "aZmuVhBFSwbWxfUieig6RQAAAAM"] [Sat Feb 21 18:08:39.087225 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /agora/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/agora/.env"] [unique_id "aZmuV_PgItFgXMKgTSvjlgAAAAk"] [Sat Feb 21 18:08:40.452434 2026] [security2:error] [pid 2184534:tid 2184534] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/alpha/.env"] [unique_id "aZmuWDCqcBI0DQh3LBJDKQAAAAY"] [Sat Feb 21 18:08:41.216937 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /alpha/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/alpha/.env"] [unique_id "aZmuWfPgItFgXMKgTSvjmAAAAAk"] [Sat Feb 21 18:08:42.268126 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/anaconda/.env"] [unique_id "aZmuWgupZJe_rAqmMz6OYQAAAAc"] [Sat Feb 21 18:08:43.064859 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /anaconda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/anaconda/.env"] [unique_id "aZmuWxszwEQRNwwyr8GKkgAAAAU"] [Sat Feb 21 18:08:56.185839 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api-server/.env"] [unique_id "aZmuaB09CmUltJs1PthasgAAAAE"] [Sat Feb 21 18:08:56.933206 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api-server/.env"] [unique_id "aZmuaBkAl6OMpCrcLcxtUAAAAAs"] [Sat Feb 21 18:08:58.107500 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/.env.back"] [unique_id "aZmuah09CmUltJs1PthaswAAAAE"] [Sat Feb 21 18:08:58.875533 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/.env.back"] [unique_id "aZmuahszwEQRNwwyr8GKnAAAAAU"] [Sat Feb 21 18:08:59.949175 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/.env.example"] [unique_id "aZmuax09CmUltJs1PthatAAAAAE"] [Sat Feb 21 18:09:00.893951 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/.env.example"] [unique_id "aZmubBszwEQRNwwyr8GKnQAAAAU"] [Sat Feb 21 18:09:02.237091 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/.env.sample"] [unique_id "aZmubush5b52zp_h1qZtDAAAAAg"] [Sat Feb 21 18:09:03.211302 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/.env.sample"] [unique_id "aZmub5pe9KOFdAtIQx5miQAAAAw"] [Sat Feb 21 18:09:04.575282 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/.env.save"] [unique_id "aZmucBszwEQRNwwyr8GKnwAAAAU"] [Sat Feb 21 18:09:05.440647 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/.env.save"] [unique_id "aZmucXe2RSgv5splKwnttAAAAAI"] [Sat Feb 21 18:09:07.281826 2026] [security2:error] [pid 2186937:tid 2186937] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmucwupZJe_rAqmMz6ObwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:09:07.281902 2026] [security2:error] [pid 2186937:tid 2186937] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmucwupZJe_rAqmMz6ObwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:09:20.937133 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/src/.env"] [unique_id "aZmugBBFSwbWxfUieig6YQAAAAM"] [Sat Feb 21 18:09:21.865015 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/src/.env"] [unique_id "aZmugUuKN3Bz1O6Cf-gGzgAAAAA"] [Sat Feb 21 18:09:23.209986 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/v1/.env"] [unique_id "aZmugxBFSwbWxfUieig6YgAAAAM"] [Sat Feb 21 18:09:24.080867 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/v1/.env"] [unique_id "aZmuhAupZJe_rAqmMz6OeAAAAAc"] [Sat Feb 21 18:09:27.344118 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/v2/.env"] [unique_id "aZmuh0uKN3Bz1O6Cf-gG0wAAAAA"] [Sat Feb 21 18:09:28.048012 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:09:28.056130 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/v2/.env"] [unique_id "aZmuiBBFSwbWxfUieig6ZwAAAAM"] [Sat Feb 21 18:09:29.260794 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/apis/.env"] [unique_id "aZmuiRszwEQRNwwyr8GKsQAAAAU"] [Sat Feb 21 18:09:30.077871 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/apis/.env"] [unique_id "aZmuih09CmUltJs1PthayAAAAAE"] [Sat Feb 21 18:09:33.235590 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app-order-client/.env"] [unique_id "aZmujRBFSwbWxfUieig6awAAAAM"] [Sat Feb 21 18:09:34.016319 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app-order-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app-order-client/.env"] [unique_id "aZmujush5b52zp_h1qZtHwAAAAg"] [Sat Feb 21 18:09:37.268352 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/.env.example"] [unique_id "aZmukQupZJe_rAqmMz6OgwAAAAc"] [Sat Feb 21 18:09:38.082683 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/.env.example"] [unique_id "aZmukhkAl6OMpCrcLcxtagAAAAs"] [Sat Feb 21 18:09:39.176628 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/.env.sample"] [unique_id "aZmukwupZJe_rAqmMz6OhAAAAAc"] [Sat Feb 21 18:09:39.895596 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/.env.sample"] [unique_id "aZmuk_PgItFgXMKgTSvjvQAAAAk"] [Sat Feb 21 18:09:41.083151 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/.env.save"] [unique_id "aZmulRszwEQRNwwyr8GKuQAAAAU"] [Sat Feb 21 18:09:41.967696 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/.env.save"] [unique_id "aZmulR09CmUltJs1Ptha0QAAAAE"] [Sat Feb 21 18:09:43.059649 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/.env.back"] [unique_id "aZmulxBFSwbWxfUieig6cAAAAAM"] [Sat Feb 21 18:09:43.269008 2026] [access_compat:error] [pid 2182703:tid 2182703] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:09:43.923266 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/.env.back"] [unique_id "aZmul3e2RSgv5splKwnt0QAAAAI"] [Sat Feb 21 18:09:45.039115 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/client/.env"] [unique_id "aZmumfPgItFgXMKgTSvjwAAAAAk"] [Sat Feb 21 18:09:45.783232 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/client/.env"] [unique_id "aZmumRBFSwbWxfUieig6cgAAAAM"] [Sat Feb 21 18:09:47.078392 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "aZmumwupZJe_rAqmMz6OiAAAAAc"] [Sat Feb 21 18:09:47.893971 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/code/community/nosto/tagging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "aZmum1AuKWjBndpBvNwXUAAAAAQ"] [Sat Feb 21 18:09:51.203553 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/config/.env"] [unique_id "aZmun_PgItFgXMKgTSvjxAAAAAk"] [Sat Feb 21 18:09:52.126286 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/config/.env"] [unique_id "aZmuoEuKN3Bz1O6Cf-gG5gAAAAA"] [Sat Feb 21 18:09:53.388443 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/config/dev/.env"] [unique_id "aZmuoVAuKWjBndpBvNwXUwAAAAQ"] [Sat Feb 21 18:09:54.157464 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/config/dev/.env"] [unique_id "aZmuovPgItFgXMKgTSvjxgAAAAk"] [Sat Feb 21 18:09:55.290226 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/frontend/.env"] [unique_id "aZmuo-sh5b52zp_h1qZtLAAAAAg"] [Sat Feb 21 18:09:56.032965 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/frontend/.env"] [unique_id "aZmupJpe9KOFdAtIQx5mrQAAAAw"] [Sat Feb 21 18:10:01.240906 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app1-static/.env"] [unique_id "aZmuqQupZJe_rAqmMz6OkAAAAAc"] [Sat Feb 21 18:10:02.900761 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app1-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app1-static/.env"] [unique_id "aZmuqvbcvcVq9UDymdkKUAAAAAY"] [Sat Feb 21 18:10:04.389322 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app2-static/.env"] [unique_id "aZmurAupZJe_rAqmMz6OkQAAAAc"] [Sat Feb 21 18:10:05.362899 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app2-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app2-static/.env"] [unique_id "aZmurfPgItFgXMKgTSvjywAAAAk"] [Sat Feb 21 18:10:06.813258 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app_dir/.env"] [unique_id "aZmurush5b52zp_h1qZtMwAAAAg"] [Sat Feb 21 18:10:07.874270 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app_dir/.env"] [unique_id "aZmurx09CmUltJs1Ptha4QAAAAE"] [Sat Feb 21 18:10:08.503868 2026] [security2:error] [pid 2178345:tid 2178345] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmusHe2RSgv5splKwnt4gAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:10:08.503955 2026] [security2:error] [pid 2178345:tid 2178345] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmusHe2RSgv5splKwnt4gAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:10:09.369569 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app_nginx_static_path/.env"] [unique_id "aZmusQupZJe_rAqmMz6OlAAAAAc"] [Sat Feb 21 18:10:10.279313 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app_nginx_static_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app_nginx_static_path/.env"] [unique_id "aZmush09CmUltJs1Ptha4gAAAAE"] [Sat Feb 21 18:10:11.510071 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/application/.env.sample"] [unique_id "aZmus-sh5b52zp_h1qZtNgAAAAg"] [Sat Feb 21 18:10:12.370615 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/application/.env.sample"] [unique_id "aZmutHe2RSgv5splKwnt5QAAAAI"] [Sat Feb 21 18:10:13.407878 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmutfPgItFgXMKgTSvjzwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:10:13.407953 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmutfPgItFgXMKgTSvjzwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:10:14.113631 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/application/.env.save"] [unique_id "aZmutvbcvcVq9UDymdkKVQAAAAY"] [Sat Feb 21 18:10:14.950670 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/application/.env.save"] [unique_id "aZmutush5b52zp_h1qZtOAAAAAg"] [Sat Feb 21 18:10:16.153990 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/apps/.env"] [unique_id "aZmuuPbcvcVq9UDymdkKVgAAAAY"] [Sat Feb 21 18:10:16.898787 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/apps/.env"] [unique_id "aZmuuJpe9KOFdAtIQx5muQAAAAw"] [Sat Feb 21 18:10:18.143330 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/apps/client/.env"] [unique_id "aZmuulAuKWjBndpBvNwXYQAAAAQ"] [Sat Feb 21 18:10:19.037805 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /apps/client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/apps/client/.env"] [unique_id "aZmuuxkAl6OMpCrcLcxtggAAAAs"] [Sat Feb 21 18:10:20.267395 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Archipel/.env"] [unique_id "aZmuvBszwEQRNwwyr8GK0wAAAAU"] [Sat Feb 21 18:10:21.108519 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /archipel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Archipel/.env"] [unique_id "aZmuvesh5b52zp_h1qZtOwAAAAg"] [Sat Feb 21 18:10:25.114676 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/asset_img/.env"] [unique_id "aZmuwQupZJe_rAqmMz6OnQAAAAc"] [Sat Feb 21 18:10:25.985372 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /asset_img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/asset_img/.env"] [unique_id "aZmuwR09CmUltJs1Ptha6gAAAAE"] [Sat Feb 21 18:10:27.146995 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/assets/.env"] [unique_id "aZmuw_bcvcVq9UDymdkKXQAAAAY"] [Sat Feb 21 18:10:27.973499 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/assets/.env"] [unique_id "aZmuwx09CmUltJs1Ptha6wAAAAE"] [Sat Feb 21 18:10:29.457112 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuxVAuKWjBndpBvNwXaQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 18:10:29.457239 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuxVAuKWjBndpBvNwXaQAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem [Sat Feb 21 18:10:35.162514 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuy0uKN3Bz1O6Cf-gG-wAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:10:35.162593 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmuy0uKN3Bz1O6Cf-gG-wAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:10:41.718623 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Assignment3/.env"] [unique_id "aZmu0fPgItFgXMKgTSvj4QAAAAk"] [Sat Feb 21 18:10:42.462763 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Assignment3/.env"] [unique_id "aZmu0ush5b52zp_h1qZtRgAAAAg"] [Sat Feb 21 18:10:43.828057 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Assignment4/.env"] [unique_id "aZmu0_PgItFgXMKgTSvj4gAAAAk"] [Sat Feb 21 18:10:44.722217 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /assignment4/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Assignment4/.env"] [unique_id "aZmu1Osh5b52zp_h1qZtRwAAAAg"] [Sat Feb 21 18:10:45.964740 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/audio/.env"] [unique_id "aZmu1RkAl6OMpCrcLcxtlAAAAAs"] [Sat Feb 21 18:10:46.743480 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /audio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/audio/.env"] [unique_id "aZmu1hszwEQRNwwyr8GK5QAAAAU"] [Sat Feb 21 18:10:52.178766 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/aws/.env"] [unique_id "aZmu3BszwEQRNwwyr8GK6AAAAAU"] [Sat Feb 21 18:10:53.017663 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/aws/.env"] [unique_id "aZmu3R09CmUltJs1Ptha_gAAAAE"] [Sat Feb 21 18:10:54.390755 2026] [security2:error] [pid 2124119:tid 2124119] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /azure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/azure/.env"] [unique_id "aZmu3hBFSwbWxfUieig6nQAAAAM"] [Sat Feb 21 18:10:55.232004 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /azure/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/azure/.env"] [unique_id "aZmu30uKN3Bz1O6Cf-gHCQAAAAA"] [Sat Feb 21 18:10:56.375062 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "aZmu4He2RSgv5splKwnuAQAAAAI"] [Sat Feb 21 18:10:57.103566 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/as-alias/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "aZmu4UuKN3Bz1O6Cf-gHCgAAAAA"] [Sat Feb 21 18:10:57.543067 2026] [security2:error] [pid 2182178:tid 2182178] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmu4BkAl6OMpCrcLcxtmQAAAAs"] [Sat Feb 21 18:10:57.543187 2026] [security2:error] [pid 2182178:tid 2182178] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmu4BkAl6OMpCrcLcxtmQAAAAs"] [Sat Feb 21 18:10:58.395232 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "aZmu4hkAl6OMpCrcLcxtmgAAAAs"] [Sat Feb 21 18:10:59.514930 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "aZmu45pe9KOFdAtIQx5m0wAAAAw"] [Sat Feb 21 18:11:00.935909 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "aZmu5BszwEQRNwwyr8GK7gAAAAU"] [Sat Feb 21 18:11:01.759909 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "aZmu5Zpe9KOFdAtIQx5m1AAAAAw"] [Sat Feb 21 18:11:03.075685 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "aZmu53e2RSgv5splKwnuBgAAAAI"] [Sat Feb 21 18:11:04.139338 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/empty-values/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "aZmu6BkAl6OMpCrcLcxtnQAAAAs"] [Sat Feb 21 18:11:04.728481 2026] [access_compat:error] [pid 2178345:tid 2178345] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:11:05.434976 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "aZmu6esh5b52zp_h1qZtVQAAAAg"] [Sat Feb 21 18:11:06.305060 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/filename/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "aZmu6gupZJe_rAqmMz6OvQAAAAc"] [Sat Feb 21 18:11:07.566673 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "aZmu6-sh5b52zp_h1qZtVgAAAAg"] [Sat Feb 21 18:11:08.447205 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/override-value/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "aZmu7FAuKWjBndpBvNwXhQAAAAQ"] [Sat Feb 21 18:11:09.796597 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "aZmu7UuKN3Bz1O6Cf-gHEwAAAAA"] [Sat Feb 21 18:11:10.633165 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /babel-plugin-dotenv/test/fixtures/prod-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "aZmu7h09CmUltJs1PthbBAAAAAE"] [Sat Feb 21 18:11:11.799720 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/back-end/app/.env"] [unique_id "aZmu73e2RSgv5splKwnuDAAAAAI"] [Sat Feb 21 18:11:12.507059 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back-end/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/back-end/app/.env"] [unique_id "aZmu8PbcvcVq9UDymdkKeQAAAAY"] [Sat Feb 21 18:11:13.816547 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/back/.env"] [unique_id "aZmu8Zpe9KOFdAtIQx5m3AAAAAw"] [Sat Feb 21 18:11:14.726587 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /back/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/back/.env"] [unique_id "aZmu8vbcvcVq9UDymdkKegAAAAY"] [Sat Feb 21 18:11:15.926220 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/backend/.env.local"] [unique_id "aZmu8x09CmUltJs1PthbCAAAAAE"] [Sat Feb 21 18:11:16.709485 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/backend/.env.local"] [unique_id "aZmu9Jpe9KOFdAtIQx5m3gAAAAw"] [Sat Feb 21 18:11:17.916666 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/backend/config/.env"] [unique_id "aZmu9R09CmUltJs1PthbCQAAAAE"] [Sat Feb 21 18:11:18.760801 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/backend/config/.env"] [unique_id "aZmu9ne2RSgv5splKwnuEQAAAAI"] [Sat Feb 21 18:11:21.854608 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/backend/src/.env"] [unique_id "aZmu-Zpe9KOFdAtIQx5m4QAAAAw"] [Sat Feb 21 18:11:22.741156 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/backend/src/.env"] [unique_id "aZmu-hkAl6OMpCrcLcxtqwAAAAs"] [Sat Feb 21 18:11:23.959683 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/backendfinaltest/.env"] [unique_id "aZmu--sh5b52zp_h1qZtYAAAAAg"] [Sat Feb 21 18:11:24.814223 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/backendfinaltest/.env"] [unique_id "aZmu_B09CmUltJs1PthbDgAAAAE"] [Sat Feb 21 18:11:30.711016 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/base_dir/.env"] [unique_id "aZmvAppe9KOFdAtIQx5m6AAAAAw"] [Sat Feb 21 18:11:31.560480 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /base_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/base_dir/.env"] [unique_id "aZmvA0uKN3Bz1O6Cf-gHIQAAAAA"] [Sat Feb 21 18:11:32.685162 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/basic-network/.env"] [unique_id "aZmvBBszwEQRNwwyr8GLAQAAAAU"] [Sat Feb 21 18:11:33.494411 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /basic-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/basic-network/.env"] [unique_id "aZmvBZpe9KOFdAtIQx5m6gAAAAw"] [Sat Feb 21 18:11:34.738731 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/bgoldd/.env"] [unique_id "aZmvBh09CmUltJs1PthbFAAAAAE"] [Sat Feb 21 18:11:35.640752 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bgoldd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/bgoldd/.env"] [unique_id "aZmvB5pe9KOFdAtIQx5m6wAAAAw"] [Sat Feb 21 18:11:36.913752 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/bitcoind/.env"] [unique_id "aZmvCBszwEQRNwwyr8GLBAAAAAU"] [Sat Feb 21 18:11:37.797791 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bitcoind/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/bitcoind/.env"] [unique_id "aZmvCfbcvcVq9UDymdkKiwAAAAY"] [Sat Feb 21 18:11:38.979318 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/blankon/.env"] [unique_id "aZmvChszwEQRNwwyr8GLBQAAAAU"] [Sat Feb 21 18:11:39.764732 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blankon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/blankon/.env"] [unique_id "aZmvC_PgItFgXMKgTSvkBgAAAAk"] [Sat Feb 21 18:11:40.202328 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:11:40.956697 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/blob/.env"] [unique_id "aZmvDBszwEQRNwwyr8GLBgAAAAU"] [Sat Feb 21 18:11:41.779692 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blob/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/blob/.env"] [unique_id "aZmvDVAuKWjBndpBvNwXnAAAAAQ"] [Sat Feb 21 18:11:42.829791 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/blog/.env"] [unique_id "aZmvDhszwEQRNwwyr8GLBwAAAAU"] [Sat Feb 21 18:11:43.579643 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/blog/.env"] [unique_id "aZmvDxkAl6OMpCrcLcxtuAAAAAs"] [Sat Feb 21 18:11:44.778907 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blogs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/blogs/.env"] [unique_id "aZmvEOsh5b52zp_h1qZtbQAAAAg"] [Sat Feb 21 18:11:45.511099 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blogs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/blogs/.env"] [unique_id "aZmvEUuKN3Bz1O6Cf-gHKAAAAAA"] [Sat Feb 21 18:11:46.763428 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/blue/.env"] [unique_id "aZmvEppe9KOFdAtIQx5m8QAAAAw"] [Sat Feb 21 18:11:47.657452 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /blue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/blue/.env"] [unique_id "aZmvExkAl6OMpCrcLcxtugAAAAs"] [Sat Feb 21 18:11:48.372538 2026] [access_compat:error] [pid 2182703:tid 2182703] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 18:11:48.897569 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/bookchain-client/.env"] [unique_id "aZmvFHe2RSgv5splKwnuIwAAAAI"] [Sat Feb 21 18:11:49.622469 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bookchain-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/bookchain-client/.env"] [unique_id "aZmvFQupZJe_rAqmMz6O1gAAAAc"] [Sat Feb 21 18:11:53.106408 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/bootstrap/.env"] [unique_id "aZmvGVAuKWjBndpBvNwXogAAAAQ"] [Sat Feb 21 18:11:53.847497 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bootstrap/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/bootstrap/.env"] [unique_id "aZmvGRszwEQRNwwyr8GLDwAAAAU"] [Sat Feb 21 18:11:55.041402 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "aZmvGx09CmUltJs1PthbIgAAAAE"] [Sat Feb 21 18:11:55.823768 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "aZmvG-sh5b52zp_h1qZtdQAAAAg"] [Sat Feb 21 18:11:56.892890 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "aZmvHPPgItFgXMKgTSvkFAAAAAk"] [Sat Feb 21 18:11:57.602591 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "aZmvHesh5b52zp_h1qZtdgAAAAg"] [Sat Feb 21 18:11:58.757748 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 18:11:58.882170 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "aZmvHhszwEQRNwwyr8GLEwAAAAU"] [Sat Feb 21 18:11:59.038868 2026] [security2:error] [pid 2188326:tid 2188326] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmvHvbcvcVq9UDymdkKmQAAAAY"], referer: https://mukyasenergy.com/wp-login.php [Sat Feb 21 18:11:59.038939 2026] [security2:error] [pid 2188326:tid 2188326] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-login.php"] [unique_id "aZmvHvbcvcVq9UDymdkKmQAAAAY"], referer: https://mukyasenergy.com/wp-login.php [Sat Feb 21 18:11:59.716541 2026] [security2:error] [pid 2189635:tid 2189635] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /boxes/oracle-vagrant-boxes/olcne/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "aZmvHxGdLfmcL6rauNamdgAAAAo"] [Sat Feb 21 18:12:01.016630 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 18:12:01.052339 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/bucoffea/.env"] [unique_id "aZmvIfPgItFgXMKgTSvkFgAAAAk"] [Sat Feb 21 18:12:01.908810 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /bucoffea/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/bucoffea/.env"] [unique_id "aZmvIUuKN3Bz1O6Cf-gHNwAAAAA"] [Sat Feb 21 18:12:02.803892 2026] [access_compat:error] [pid 2182703:tid 2182703] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 18:12:04.504286 2026] [access_compat:error] [pid 2188326:tid 2188326] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 18:12:07.450869 2026] [security2:error] [pid 2182703:tid 2182703] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/build/.env"] [unique_id "aZmvJxszwEQRNwwyr8GLGAAAAAU"] [Sat Feb 21 18:12:08.303487 2026] [security2:error] [pid 2189635:tid 2189635] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /build/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/build/.env"] [unique_id "aZmvKBGdLfmcL6rauNamewAAAAo"] [Sat Feb 21 18:12:11.826678 2026] [access_compat:error] [pid 2182178:tid 2182178] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 18:12:12.214462 2026] [security2:error] [pid 2187398:tid 2187398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvLEuKN3Bz1O6Cf-gHPQAAAAA"] [Sat Feb 21 18:12:12.214540 2026] [security2:error] [pid 2187398:tid 2187398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvLEuKN3Bz1O6Cf-gHPQAAAAA"] [Sat Feb 21 18:12:13.919679 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvLZpe9KOFdAtIQx5nAQAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:12:13.919737 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvLZpe9KOFdAtIQx5nAQAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:12:20.892781 2026] [security2:error] [pid 2182703:tid 2182703] [client 167.71.15.42:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZmvMxszwEQRNwwyr8GLIAAAAAU"] [Sat Feb 21 18:12:20.892870 2026] [security2:error] [pid 2182703:tid 2182703] [client 167.71.15.42:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "rentacarkarachi.com"] [uri "/wp-login.php"] [unique_id "aZmvMxszwEQRNwwyr8GLIAAAAAU"] [Sat Feb 21 18:12:21.177989 2026] [security2:error] [pid 2182178:tid 2182178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cardea/backend/.env"] [unique_id "aZmvNRkAl6OMpCrcLcxt0AAAAAs"] [Sat Feb 21 18:12:21.888242 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cardea/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cardea/backend/.env"] [unique_id "aZmvNZpe9KOFdAtIQx5nBgAAAAw"] [Sat Feb 21 18:12:23.028263 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cdw-backend/.env"] [unique_id "aZmvNwupZJe_rAqmMz6O8AAAAAc"] [Sat Feb 21 18:12:23.767117 2026] [security2:error] [pid 2178345:tid 2178345] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cdw-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cdw-backend/.env"] [unique_id "aZmvN3e2RSgv5splKwnuPQAAAAI"] [Sat Feb 21 18:12:24.880882 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cgi-bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cgi-bin/.env"] [unique_id "aZmvOAupZJe_rAqmMz6O8QAAAAc"] [Sat Feb 21 18:12:25.755453 2026] [security2:error] [pid 2184384:tid 2184384] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cgi-bin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cgi-bin/.env"] [unique_id "aZmvOesh5b52zp_h1qZtjAAAAAg"] [Sat Feb 21 18:12:29.079634 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch2-mytodo/.env"] [unique_id "aZmvPfPgItFgXMKgTSvkKgAAAAk"] [Sat Feb 21 18:12:30.927916 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch2-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch2-mytodo/.env"] [unique_id "aZmvPk6p3qDPpdImXz_s6wAAABE"] [Sat Feb 21 18:12:31.277450 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:12:32.243074 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch6-mytodo/.env"] [unique_id "aZmvQAupZJe_rAqmMz6O9AAAAAc"] [Sat Feb 21 18:12:32.278733 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:12:33.074406 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch6-mytodo/.env"] [unique_id "aZmvQWxG-ZG_tIvrf97l1gAAAAM"] [Sat Feb 21 18:12:33.280080 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:12:34.225614 2026] [security2:error] [pid 2190238:tid 2190238] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch6a-mytodo/.env"] [unique_id "aZmvQlMAUy8nUJkaAuo4CAAAAA0"] [Sat Feb 21 18:12:34.281334 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:12:34.982800 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch6a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch6a-mytodo/.env"] [unique_id "aZmvQvPgItFgXMKgTSvkLQAAAAk"] [Sat Feb 21 18:12:35.282569 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:12:36.284069 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:12:36.284166 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch7-mytodo/.env"] [unique_id "aZmvRPbcvcVq9UDymdkKrgAAAAY"] [Sat Feb 21 18:12:37.189284 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch7-mytodo/.env"] [unique_id "aZmvRZpe9KOFdAtIQx5nDgAAAAw"] [Sat Feb 21 18:12:38.262322 2026] [security2:error] [pid 2186937:tid 2186937] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmvRQupZJe_rAqmMz6O9gAAAAc"] [Sat Feb 21 18:12:38.262411 2026] [security2:error] [pid 2186937:tid 2186937] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmvRQupZJe_rAqmMz6O9gAAAAc"] [Sat Feb 21 18:12:38.378144 2026] [security2:error] [pid 2190247:tid 2190247] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch7a-mytodo/.env"] [unique_id "aZmvRo0GsdcpjWriNG-g6wAAAA8"] [Sat Feb 21 18:12:39.243580 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch7a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch7a-mytodo/.env"] [unique_id "aZmvR1MqSo7iS-0AaIsVDgAAABM"] [Sat Feb 21 18:12:40.393369 2026] [security2:error] [pid 2190238:tid 2190238] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch8-mytodo/.env"] [unique_id "aZmvSFMAUy8nUJkaAuo4CwAAAA0"] [Sat Feb 21 18:12:41.277839 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch8-mytodo/.env"] [unique_id "aZmvSVAuKWjBndpBvNwXvwAAAAQ"] [Sat Feb 21 18:12:42.441561 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch8a-mytodo/.env"] [unique_id "aZmvSmxG-ZG_tIvrf97l2gAAAAM"] [Sat Feb 21 18:12:43.185556 2026] [security2:error] [pid 2190247:tid 2190247] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8a-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch8a-mytodo/.env"] [unique_id "aZmvS40GsdcpjWriNG-g7gAAAA8"] [Sat Feb 21 18:12:44.532858 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ch8b-mytodo/.env"] [unique_id "aZmvTPPgItFgXMKgTSvkMwAAAAk"] [Sat Feb 21 18:12:45.356408 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ch8b-mytodo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ch8b-mytodo/.env"] [unique_id "aZmvTUuKN3Bz1O6Cf-gHUwAAAAA"] [Sat Feb 21 18:12:46.747223 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Chai/.env"] [unique_id "aZmvTnpA9eipntFQcueAbgAAABI"] [Sat Feb 21 18:12:47.591626 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chai/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Chai/.env"] [unique_id "aZmvT_bcvcVq9UDymdkKtAAAAAY"] [Sat Feb 21 18:12:48.807940 2026] [security2:error] [pid 2190238:tid 2190238] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/challenge/.env"] [unique_id "aZmvUFMAUy8nUJkaAuo4EQAAAA0"] [Sat Feb 21 18:12:49.577345 2026] [security2:error] [pid 2190247:tid 2190247] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenge/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/challenge/.env"] [unique_id "aZmvUY0GsdcpjWriNG-g8gAAAA8"] [Sat Feb 21 18:12:50.689658 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/challenges/.env"] [unique_id "aZmvUk6p3qDPpdImXz_s-AAAABE"] [Sat Feb 21 18:12:51.581507 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /challenges/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/challenges/.env"] [unique_id "aZmvU1MqSo7iS-0AaIsVFwAAABM"] [Sat Feb 21 18:12:52.912702 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/charts/liveObjects/.env"] [unique_id "aZmvVGxG-ZG_tIvrf97l4QAAAAM"] [Sat Feb 21 18:12:53.871282 2026] [security2:error] [pid 2190247:tid 2190247] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /charts/liveobjects/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/charts/liveObjects/.env"] [unique_id "aZmvVY0GsdcpjWriNG-g9QAAAA8"] [Sat Feb 21 18:12:54.225263 2026] [security2:error] [pid 2190250:tid 2190250] [client 144.91.126.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-global": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmvVVMqSo7iS-0AaIsVGAAAABM"], referer: https://denederveensehoevesite.nl/wp-login.php [Sat Feb 21 18:12:54.225344 2026] [security2:error] [pid 2190250:tid 2190250] [client 144.91.126.77:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/scienceonstage-ip": Permission denied [hostname "denederveensehoevesite.nl"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZmvVVMqSo7iS-0AaIsVGAAAABM"], referer: https://denederveensehoevesite.nl/wp-login.php [Sat Feb 21 18:12:55.130933 2026] [security2:error] [pid 2190238:tid 2190238] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/chat-client/.env"] [unique_id "aZmvV1MAUy8nUJkaAuo4FQAAAA0"] [Sat Feb 21 18:12:55.994538 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chat-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/chat-client/.env"] [unique_id "aZmvV06p3qDPpdImXz_s-wAAABE"] [Sat Feb 21 18:12:57.368767 2026] [security2:error] [pid 2190247:tid 2190247] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/chiminey/.env"] [unique_id "aZmvWY0GsdcpjWriNG-g9wAAAA8"] [Sat Feb 21 18:12:58.165485 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /chiminey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/chiminey/.env"] [unique_id "aZmvWvbcvcVq9UDymdkKuwAAAAY"] [Sat Feb 21 18:13:00.034484 2026] [security2:error] [pid 2188326:tid 2188326] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvW_bcvcVq9UDymdkKvAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 18:13:00.034593 2026] [security2:error] [pid 2188326:tid 2188326] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvW_bcvcVq9UDymdkKvAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 18:13:01.501385 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ci/.env"] [unique_id "aZmvXU6p3qDPpdImXz_s_gAAABE"] [Sat Feb 21 18:13:02.076529 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvXUuKN3Bz1O6Cf-gHXgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 18:13:02.076664 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvXUuKN3Bz1O6Cf-gHXgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A7 [Sat Feb 21 18:13:02.414910 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ci/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ci/.env"] [unique_id "aZmvXh09CmUltJs1PthbTQAAAAE"] [Sat Feb 21 18:13:03.322543 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:13:03.683230 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/client-app/.env"] [unique_id "aZmvXwupZJe_rAqmMz6PBgAAAAc"] [Sat Feb 21 18:13:04.553299 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/client-app/.env"] [unique_id "aZmvYB09CmUltJs1PthbTgAAAAE"] [Sat Feb 21 18:13:05.185423 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvYUuKN3Bz1O6Cf-gHYQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 18:13:05.185514 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvYUuKN3Bz1O6Cf-gHYQAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A2 [Sat Feb 21 18:13:05.780505 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "aZmvYVMqSo7iS-0AaIsVIwAAABM"] [Sat Feb 21 18:13:06.598108 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmvYVMqSo7iS-0AaIsVIwAAABM"] [Sat Feb 21 18:13:06.598181 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmvYVMqSo7iS-0AaIsVIwAAABM"] [Sat Feb 21 18:13:06.652814 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/mutual-fund-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "aZmvYk6p3qDPpdImXz_tAQAAABE"] [Sat Feb 21 18:13:07.991537 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/client/src/.env"] [unique_id "aZmvY1AuKWjBndpBvNwX0gAAAAQ"] [Sat Feb 21 18:13:08.859033 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /client/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/client/src/.env"] [unique_id "aZmvZE6p3qDPpdImXz_tAgAAABE"] [Sat Feb 21 18:13:09.726896 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:13:10.084106 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ClientApp/.env"] [unique_id "aZmvZh09CmUltJs1PthbUwAAAAE"] [Sat Feb 21 18:13:10.872750 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ClientApp/.env"] [unique_id "aZmvZk6p3qDPpdImXz_tAwAAABE"] [Sat Feb 21 18:13:12.051261 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/clld_dir/.env"] [unique_id "aZmvaEuKN3Bz1O6Cf-gHZgAAAAA"] [Sat Feb 21 18:13:12.854603 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /clld_dir/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/clld_dir/.env"] [unique_id "aZmvaFMqSo7iS-0AaIsVKAAAABM"] [Sat Feb 21 18:13:14.104425 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cloud/.env"] [unique_id "aZmvah09CmUltJs1PthbVwAAAAE"] [Sat Feb 21 18:13:14.937345 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cloud/.env"] [unique_id "aZmvalMqSo7iS-0AaIsVKQAAABM"] [Sat Feb 21 18:13:16.067848 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aZmvbPPgItFgXMKgTSvkTAAAAAk"] [Sat Feb 21 18:13:16.860894 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cmd/testdata/expected/dot_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aZmvbHpA9eipntFQcueAhAAAABI"] [Sat Feb 21 18:13:18.171753 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/code/api/.env"] [unique_id "aZmvbkuKN3Bz1O6Cf-gHagAAAAA"] [Sat Feb 21 18:13:19.075295 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/code/api/.env"] [unique_id "aZmvb3pA9eipntFQcueAhgAAABI"] [Sat Feb 21 18:13:20.415211 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/code/web/.env"] [unique_id "aZmvcJpe9KOFdAtIQx5nLAAAAAw"] [Sat Feb 21 18:13:21.290617 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /code/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/code/web/.env"] [unique_id "aZmvcUuKN3Bz1O6Cf-gHbwAAAAA"] [Sat Feb 21 18:13:22.618370 2026] [security2:error] [pid 2190238:tid 2190238] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "aZmvclMAUy8nUJkaAuo4KQAAAA0"] [Sat Feb 21 18:13:23.403526 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codegolf.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "aZmvc_PgItFgXMKgTSvkUwAAAAk"] [Sat Feb 21 18:13:24.712257 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/codenames-frontend/.env"] [unique_id "aZmvdE6p3qDPpdImXz_tFQAAABE"] [Sat Feb 21 18:13:25.450257 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /codenames-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/codenames-frontend/.env"] [unique_id "aZmvdQupZJe_rAqmMz6PGwAAAAc"] [Sat Feb 21 18:13:26.594088 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "aZmvdkuKN3Bz1O6Cf-gHcwAAAAA"] [Sat Feb 21 18:13:27.420413 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collab-connect-web-application/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "aZmvd1AuKWjBndpBvNwX6AAAAAQ"] [Sat Feb 21 18:13:28.578967 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/collected_static/.env"] [unique_id "aZmvePPgItFgXMKgTSvkVgAAAAk"] [Sat Feb 21 18:13:29.464081 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /collected_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/collected_static/.env"] [unique_id "aZmveXpA9eipntFQcueAkAAAABI"] [Sat Feb 21 18:13:30.109155 2026] [security2:error] [pid 2190227:tid 2190227] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmveWxG-ZG_tIvrf97mAQAAAAM"] [Sat Feb 21 18:13:30.109248 2026] [security2:error] [pid 2190227:tid 2190227] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmveWxG-ZG_tIvrf97mAQAAAAM"] [Sat Feb 21 18:13:30.637808 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/community/.env"] [unique_id "aZmvek6p3qDPpdImXz_tGwAAABE"] [Sat Feb 21 18:13:31.353948 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:13:31.367140 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /community/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/community/.env"] [unique_id "aZmvexD12ciBDK59nTzuUQAAAAI"] [Sat Feb 21 18:13:32.706983 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/compose/.env"] [unique_id "aZmvfB09CmUltJs1PthbaAAAAAE"] [Sat Feb 21 18:13:33.470007 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/compose/.env"] [unique_id "aZmvffbcvcVq9UDymdkK0QAAAAY"] [Sat Feb 21 18:13:38.621046 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/config/.env.dev"] [unique_id "aZmvgk6p3qDPpdImXz_tIAAAABE"] [Sat Feb 21 18:13:39.136172 2026] [security2:error] [pid 2187398:tid 2187398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvg0uKN3Bz1O6Cf-gHfQAAAAA"] [Sat Feb 21 18:13:39.136252 2026] [security2:error] [pid 2187398:tid 2187398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvg0uKN3Bz1O6Cf-gHfQAAAAA"] [Sat Feb 21 18:13:39.499359 2026] [security2:error] [pid 2186937:tid 2186937] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/config/.env.dev"] [unique_id "aZmvgwupZJe_rAqmMz6PJwAAAAc"] [Sat Feb 21 18:13:40.937962 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/config/.env.local"] [unique_id "aZmvhPPgItFgXMKgTSvkXwAAAAk"] [Sat Feb 21 18:13:41.690764 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/config/.env.local"] [unique_id "aZmvhUuKN3Bz1O6Cf-gHfwAAAAA"] [Sat Feb 21 18:13:42.985046 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/config/.env.production"] [unique_id "aZmvhhD12ciBDK59nTzuWgAAAAI"] [Sat Feb 21 18:13:43.760876 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /config/.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/config/.env.production"] [unique_id "aZmvh2xG-ZG_tIvrf97mDQAAAAM"] [Sat Feb 21 18:13:47.335229 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvi_PgItFgXMKgTSvkYwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0 [Sat Feb 21 18:13:47.335334 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvi_PgItFgXMKgTSvkYwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0 [Sat Feb 21 18:13:47.516930 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmvih09CmUltJs1PthbdwAAAAE"] [Sat Feb 21 18:13:47.517003 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmvih09CmUltJs1PthbdwAAAAE"] [Sat Feb 21 18:13:50.843883 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/config/config.yml"] [unique_id "aZmvjk6p3qDPpdImXz_tKwAAABE"] [Sat Feb 21 18:13:51.678910 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/config/config.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/config.yml found within REQUEST_FILENAME: /config/config.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/config/config.yml"] [unique_id "aZmvj_PgItFgXMKgTSvkZgAAAAk"] [Sat Feb 21 18:13:55.297702 2026] [security2:error] [pid 2190764:tid 2190764] [client 207.46.13.63:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-global": Permission denied [hostname "www.protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmvkRD12ciBDK59nTzuYgAAAAI"] [Sat Feb 21 18:13:55.297792 2026] [security2:error] [pid 2190764:tid 2190764] [client 207.46.13.63:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/protecprtmybills-ip": Permission denied [hostname "www.protectmybills.uk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmvkRD12ciBDK59nTzuYgAAAAI"] [Sat Feb 21 18:14:03.007490 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ContainerRegistry/.env"] [unique_id "aZmvm_bcvcVq9UDymdkK6QAAAAY"] [Sat Feb 21 18:14:04.130064 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containerregistry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ContainerRegistry/.env"] [unique_id "aZmvnJpe9KOFdAtIQx5nTQAAAAw"] [Sat Feb 21 18:14:05.274679 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/containers/.env"] [unique_id "aZmvnfbcvcVq9UDymdkK6gAAAAY"] [Sat Feb 21 18:14:06.142309 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /containers/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/containers/.env"] [unique_id "aZmvnlMqSo7iS-0AaIsVUQAAABM"] [Sat Feb 21 18:14:07.383204 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/content/.env"] [unique_id "aZmvn_bcvcVq9UDymdkK6wAAAAY"] [Sat Feb 21 18:14:08.220848 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/content/.env"] [unique_id "aZmvoGxG-ZG_tIvrf97mGwAAAAM"] [Sat Feb 21 18:14:09.393391 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:14:09.428959 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/control/.env"] [unique_id "aZmvoXpA9eipntFQcueArAAAABI"] [Sat Feb 21 18:14:10.283630 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /control/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/control/.env"] [unique_id "aZmvonrZ_c8LouBrYfy6oAAAAAU"] [Sat Feb 21 18:14:11.452114 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/core/app/.env"] [unique_id "aZmvo2xG-ZG_tIvrf97mHQAAAAM"] [Sat Feb 21 18:14:12.299558 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/core/app/.env"] [unique_id "aZmvpHpA9eipntFQcueArgAAABI"] [Sat Feb 21 18:14:13.417980 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/core/Datavase/.env"] [unique_id "aZmvpZpe9KOFdAtIQx5nUwAAAAw"] [Sat Feb 21 18:14:14.206354 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/datavase/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/core/Datavase/.env"] [unique_id "aZmvphD12ciBDK59nTzubQAAAAI"] [Sat Feb 21 18:14:15.397737 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/core/persistence/.env"] [unique_id "aZmvp5pe9KOFdAtIQx5nVAAAAAw"] [Sat Feb 21 18:14:16.255556 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/core/persistence/.env"] [unique_id "aZmvqHpA9eipntFQcueAsAAAABI"] [Sat Feb 21 18:14:16.597630 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.56:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/wp-content/plugins/elementor/assets/js/frontend-modules.min.js"] [unique_id "aZmvqEuKN3Bz1O6Cf-gHlgAAAAA"] [Sat Feb 21 18:14:16.597694 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.56:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/wp-content/plugins/elementor/assets/js/frontend-modules.min.js"] [unique_id "aZmvqEuKN3Bz1O6Cf-gHlgAAAAA"] [Sat Feb 21 18:14:17.510838 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "aZmvqWxG-ZG_tIvrf97mIgAAAAM"] [Sat Feb 21 18:14:18.330102 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "aZmvqh09CmUltJs1PthbiwAAAAE"] [Sat Feb 21 18:14:19.826467 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/counterblockd/.env"] [unique_id "aZmvq0uKN3Bz1O6Cf-gHmAAAAAA"] [Sat Feb 21 18:14:20.634521 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterblockd/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/counterblockd/.env"] [unique_id "aZmvrB09CmUltJs1PthbjAAAAAE"] [Sat Feb 21 18:14:21.757823 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/counterwallet/.env"] [unique_id "aZmvrU6p3qDPpdImXz_tPgAAABE"] [Sat Feb 21 18:14:22.468539 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php_"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php_"] [unique_id "aZmvrnpA9eipntFQcueAtAAAABI"] [Sat Feb 21 18:14:22.682632 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /counterwallet/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/counterwallet/.env"] [unique_id "aZmvrhD12ciBDK59nTzucgAAAAI"] [Sat Feb 21 18:14:23.460349 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php"] [unique_id "aZmvr3pA9eipntFQcueAtQAAABI"] [Sat Feb 21 18:14:23.917604 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cp/.env"] [unique_id "aZmvr_bcvcVq9UDymdkK9QAAAAY"] [Sat Feb 21 18:14:24.369554 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php~"] [unique_id "aZmvsHpA9eipntFQcueAtgAAABI"] [Sat Feb 21 18:14:24.720026 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cp/.env"] [unique_id "aZmvsFAuKWjBndpBvNwYEwAAAAQ"] [Sat Feb 21 18:14:24.827452 2026] [security2:error] [pid 2190764:tid 2190764] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvsBD12ciBDK59nTzucwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice [Sat Feb 21 18:14:24.827532 2026] [security2:error] [pid 2190764:tid 2190764] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvsBD12ciBDK59nTzucwAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice [Sat Feb 21 18:14:25.301241 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swo"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.wp-config.php.swo"] [unique_id "aZmvsU6p3qDPpdImXz_tQAAAABE"] [Sat Feb 21 18:14:25.867392 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cronlab/.env"] [unique_id "aZmvsUuKN3Bz1O6Cf-gHmwAAAAA"] [Sat Feb 21 18:14:26.218297 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.tmp"] [unique_id "aZmvsppe9KOFdAtIQx5nWwAAAAw"] [Sat Feb 21 18:14:26.728505 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cronlab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cronlab/.env"] [unique_id "aZmvsmxG-ZG_tIvrf97mKQAAAAM"] [Sat Feb 21 18:14:27.155820 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.sav"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.sav"] [unique_id "aZmvsx09CmUltJs1PthbkQAAAAE"] [Sat Feb 21 18:14:28.167354 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/cryo_project/.env"] [unique_id "aZmvtPbcvcVq9UDymdkK-QAAAAY"] [Sat Feb 21 18:14:28.340260 2026] [security2:error] [pid 2187398:tid 2187398] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.swp~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.swp~"] [unique_id "aZmvtEuKN3Bz1O6Cf-gHnQAAAAA"] [Sat Feb 21 18:14:29.068445 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /cryo_project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/cryo_project/.env"] [unique_id "aZmvtRD12ciBDK59nTzudgAAAAI"] [Sat Feb 21 18:14:29.342558 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.wp-config.php.swm"] [unique_id "aZmvtWxG-ZG_tIvrf97mKwAAAAM"] [Sat Feb 21 18:14:30.311174 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.wp-config.php.swn"] [unique_id "aZmvtvbcvcVq9UDymdkK-wAAAAY"] [Sat Feb 21 18:14:30.543564 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/css/.env"] [unique_id "aZmvtlAuKWjBndpBvNwYFwAAAAQ"] [Sat Feb 21 18:14:31.292068 2026] [security2:error] [pid 2187398:tid 2187398] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /.wp-config.php.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.wp-config.php.swp"] [unique_id "aZmvt0uKN3Bz1O6Cf-gHoQAAAAA"] [Sat Feb 21 18:14:31.339237 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /css/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/css/.env"] [unique_id "aZmvt_bcvcVq9UDymdkK_QAAAAY"] [Sat Feb 21 18:14:32.220248 2026] [security2:error] [pid 2173288:tid 2173288] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.test"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.test"] [unique_id "aZmvuPPgItFgXMKgTSvkfgAAAAk"] [Sat Feb 21 18:14:32.221548 2026] [security2:error] [pid 2173288:tid 2173288] [client 157.66.54.26:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/index.php"] [unique_id "aZmvuPPgItFgXMKgTSvkfgAAAAk"] [Sat Feb 21 18:14:32.221593 2026] [security2:error] [pid 2173288:tid 2173288] [client 157.66.54.26:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/index.php"] [unique_id "aZmvuPPgItFgXMKgTSvkfgAAAAk"] [Sat Feb 21 18:14:32.385383 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/custom/.env"] [unique_id "aZmvuFAuKWjBndpBvNwYGQAAAAQ"] [Sat Feb 21 18:14:33.126207 2026] [security2:error] [pid 2187398:tid 2187398] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /.wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/.wp-config.bak"] [unique_id "aZmvuUuKN3Bz1O6Cf-gHpAAAAAA"] [Sat Feb 21 18:14:33.143242 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /custom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/custom/.env"] [unique_id "aZmvuWxG-ZG_tIvrf97mLwAAAAM"] [Sat Feb 21 18:14:34.052822 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/wp-config.bak"] [unique_id "aZmvulAuKWjBndpBvNwYGgAAAAQ"] [Sat Feb 21 18:14:34.053206 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.bak"] [unique_id "aZmvulAuKWjBndpBvNwYGgAAAAQ"] [Sat Feb 21 18:14:34.403662 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/d/.env"] [unique_id "aZmvuvPgItFgXMKgTSvkgQAAAAk"] [Sat Feb 21 18:14:35.217695 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /d/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/d/.env"] [unique_id "aZmvu2xG-ZG_tIvrf97mMAAAAAM"] [Sat Feb 21 18:14:36.839305 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.back"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.back"] [unique_id "aZmvvBD12ciBDK59nTzufAAAAAI"] [Sat Feb 21 18:14:37.844721 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php-bak"] [unique_id "aZmvvRD12ciBDK59nTzufQAAAAI"] [Sat Feb 21 18:14:38.784300 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.bk"] [unique_id "aZmvvnpA9eipntFQcueAwAAAABI"] [Sat Feb 21 18:14:39.743290 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.saved"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.saved"] [unique_id "aZmvv3pA9eipntFQcueAwQAAABI"] [Sat Feb 21 18:14:41.652570 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/wp-config.old"] [unique_id "aZmvwZpe9KOFdAtIQx5nYgAAAAw"] [Sat Feb 21 18:14:41.652821 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.old"] [unique_id "aZmvwZpe9KOFdAtIQx5nYgAAAAw"] [Sat Feb 21 18:14:42.627490 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.save"] [unique_id "aZmvwlMqSo7iS-0AaIsVbgAAABM"] [Sat Feb 21 18:14:43.578661 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.orig"] [unique_id "aZmvw06p3qDPpdImXz_tSwAAABE"] [Sat Feb 21 18:14:44.355972 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/data/.env"] [unique_id "aZmvxJpe9KOFdAtIQx5nZAAAAAw"] [Sat Feb 21 18:14:44.602277 2026] [security2:error] [pid 2173288:tid 2173288] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.old"] [unique_id "aZmvxPPgItFgXMKgTSvkiQAAAAk"] [Sat Feb 21 18:14:45.096998 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/data/.env"] [unique_id "aZmvxUuKN3Bz1O6Cf-gHrAAAAAA"] [Sat Feb 21 18:14:45.546972 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php-old"] [unique_id "aZmvxXpA9eipntFQcueAxwAAABI"] [Sat Feb 21 18:14:46.465090 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/database/.env"] [unique_id "aZmvxnrZ_c8LouBrYfy6uwAAAAU"] [Sat Feb 21 18:14:46.520456 2026] [security2:error] [pid 2173288:tid 2173288] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.original"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.original"] [unique_id "aZmvxvPgItFgXMKgTSvkiwAAAAk"] [Sat Feb 21 18:14:47.241195 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/database/.env"] [unique_id "aZmvxxD12ciBDK59nTzugwAAAAI"] [Sat Feb 21 18:14:47.452421 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.dist"] [unique_id "aZmvx1MqSo7iS-0AaIsVdQAAABM"] [Sat Feb 21 18:14:47.454012 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/index.php"] [unique_id "aZmvx1MqSo7iS-0AaIsVdQAAABM"] [Sat Feb 21 18:14:47.454063 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/index.php"] [unique_id "aZmvx1MqSo7iS-0AaIsVdQAAABM"] [Sat Feb 21 18:14:48.366019 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dataset1/.env"] [unique_id "aZmvyFMqSo7iS-0AaIsVdgAAABM"] [Sat Feb 21 18:14:48.419888 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.txt"] [unique_id "aZmvyJpe9KOFdAtIQx5nagAAAAw"] [Sat Feb 21 18:14:49.205306 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dataset1/.env"] [unique_id "aZmvyR09CmUltJs1PthbnQAAAAE"] [Sat Feb 21 18:14:49.373487 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.txt"] [unique_id "aZmvyfbcvcVq9UDymdkLCgAAAAY"] [Sat Feb 21 18:14:49.776665 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-global": Permission denied [hostname "cybercraft.biz"] [uri "/wp-config.php.backup"] [unique_id "aZmvyXrZ_c8LouBrYfy6vgAAAAU"] [Sat Feb 21 18:14:49.776728 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/cybercraft-ip": Permission denied [hostname "cybercraft.biz"] [uri "/wp-config.php.backup"] [unique_id "aZmvyXrZ_c8LouBrYfy6vgAAAAU"] [Sat Feb 21 18:14:50.325666 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.backup"] [unique_id "aZmvyvbcvcVq9UDymdkLCwAAAAY"] [Sat Feb 21 18:14:50.411432 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dataset2/.env"] [unique_id "aZmvyvPgItFgXMKgTSvkjgAAAAk"] [Sat Feb 21 18:14:51.143809 2026] [security2:error] [pid 2188326:tid 2188326] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dataset2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dataset2/.env"] [unique_id "aZmvy_bcvcVq9UDymdkLDAAAAAY"] [Sat Feb 21 18:14:51.261609 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php_bck"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php_bck"] [unique_id "aZmvyxD12ciBDK59nTzuhgAAAAI"] [Sat Feb 21 18:14:53.176033 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php_bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php_bk"] [unique_id "aZmvzfbcvcVq9UDymdkLDQAAAAY"] [Sat Feb 21 18:14:54.104337 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php_old"] [unique_id "aZmvzh09CmUltJs1PthboQAAAAE"] [Sat Feb 21 18:14:55.051818 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php_save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php_save"] [unique_id "aZmvzx09CmUltJs1PthbogAAAAE"] [Sat Feb 21 18:14:55.728585 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvz_PgItFgXMKgTSvkkgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:14:55.728641 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmvz_PgItFgXMKgTSvkkgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:14:56.005858 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php_"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php_"] [unique_id "aZmv0B09CmUltJs1PthbpAAAAAE"] [Sat Feb 21 18:14:56.265596 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/db.sql"] [unique_id "aZmv0EuKN3Bz1O6Cf-gHtgAAAAA"] [Sat Feb 21 18:14:57.007385 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php"] [unique_id "aZmv0R09CmUltJs1PthbpgAAAAE"] [Sat Feb 21 18:14:57.084644 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/db.sql"] [unique_id "aZmv0WxG-ZG_tIvrf97mQgAAAAM"] [Sat Feb 21 18:14:57.934073 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php~"] [unique_id "aZmv0Zpe9KOFdAtIQx5ncQAAAAw"] [Sat Feb 21 18:14:58.298327 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/db_backup.sql"] [unique_id "aZmv0k6p3qDPpdImXz_tWAAAABE"] [Sat Feb 21 18:14:58.882173 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/._wp-config.php"] [unique_id "aZmv0ppe9KOFdAtIQx5ncgAAAAw"] [Sat Feb 21 18:14:59.131212 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/db_backup.sql"] [unique_id "aZmv0zgyub9jMIOPIArw4gAAAAc"] [Sat Feb 21 18:14:59.807581 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/.wp-config.php.swm"] [unique_id "aZmv0xD12ciBDK59nTzujwAAAAI"] [Sat Feb 21 18:15:00.758250 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/.wp-config.php.swn"] [unique_id "aZmv1GxG-ZG_tIvrf97mRAAAAAM"] [Sat Feb 21 18:15:01.686700 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/.wp-config.php.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/.wp-config.php.swp"] [unique_id "aZmv1VAuKWjBndpBvNwYMQAAAAQ"] [Sat Feb 21 18:15:02.612454 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.bak"] [unique_id "aZmv1lAuKWjBndpBvNwYMwAAAAQ"] [Sat Feb 21 18:15:02.612730 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wordpress/wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.bak"] [unique_id "aZmv1lAuKWjBndpBvNwYMwAAAAQ"] [Sat Feb 21 18:15:05.462098 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php-bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php-bak"] [unique_id "aZmv2XrZ_c8LouBrYfy6ywAAAAU"] [Sat Feb 21 18:15:05.469403 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/debug.log"] [unique_id "aZmv2Zpe9KOFdAtIQx5neQAAAAw"] [Sat Feb 21 18:15:06.320157 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/debug.log"] [unique_id "aZmv2nrZ_c8LouBrYfy6zAAAAAU"] [Sat Feb 21 18:15:06.402158 2026] [security2:error] [pid 2191386:tid 2191386] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.bk"] [unique_id "aZmv2jgyub9jMIOPIArw5gAAAAc"] [Sat Feb 21 18:15:07.377521 2026] [security2:error] [pid 2191386:tid 2191386] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.saved"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.saved"] [unique_id "aZmv2zgyub9jMIOPIArw5wAAAAc"] [Sat Feb 21 18:15:08.356707 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.old"] [unique_id "aZmv3E6p3qDPpdImXz_tXQAAABE"] [Sat Feb 21 18:15:08.357101 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wordpress/wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.old"] [unique_id "aZmv3E6p3qDPpdImXz_tXQAAABE"] [Sat Feb 21 18:15:09.306080 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.bak"] [unique_id "aZmv3U6p3qDPpdImXz_tXgAAABE"] [Sat Feb 21 18:15:10.606879 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.save"] [unique_id "aZmv3lMqSo7iS-0AaIsViwAAABM"] [Sat Feb 21 18:15:11.571533 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.orig"] [unique_id "aZmv3_bcvcVq9UDymdkLGwAAAAY"] [Sat Feb 21 18:15:12.488388 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.old"] [unique_id "aZmv4E6p3qDPpdImXz_tYAAAABE"] [Sat Feb 21 18:15:13.420011 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php-old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php-old"] [unique_id "aZmv4U6p3qDPpdImXz_tYQAAABE"] [Sat Feb 21 18:15:14.379202 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.original"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.original"] [unique_id "aZmv4vbcvcVq9UDymdkLHQAAAAY"] [Sat Feb 21 18:15:15.297026 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.dist"] [unique_id "aZmv41AuKWjBndpBvNwYPgAAAAQ"] [Sat Feb 21 18:15:16.081546 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/default/.env"] [unique_id "aZmv5BD12ciBDK59nTzumAAAAAI"] [Sat Feb 21 18:15:16.235692 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wordpress/wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.txt"] [unique_id "aZmv5FAuKWjBndpBvNwYPwAAAAQ"] [Sat Feb 21 18:15:16.826447 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /default/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/default/.env"] [unique_id "aZmv5HpA9eipntFQcueA3QAAABI"] [Sat Feb 21 18:15:17.208717 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.txt"] [unique_id "aZmv5fbcvcVq9UDymdkLIAAAAAY"] [Sat Feb 21 18:15:17.982035 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/delivery/.env"] [unique_id "aZmv5WxG-ZG_tIvrf97mUwAAAAM"] [Sat Feb 21 18:15:18.153528 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php.backup"] [unique_id "aZmv5lAuKWjBndpBvNwYQQAAAAQ"] [Sat Feb 21 18:15:18.756287 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /delivery/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/delivery/.env"] [unique_id "aZmv5kuKN3Bz1O6Cf-gHxAAAAAA"] [Sat Feb 21 18:15:19.088709 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php_bck"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php_bck"] [unique_id "aZmv51AuKWjBndpBvNwYQgAAAAQ"] [Sat Feb 21 18:15:19.980291 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/demo-app/.env"] [unique_id "aZmv51AuKWjBndpBvNwYQwAAAAQ"] [Sat Feb 21 18:15:20.752370 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/demo-app/.env"] [unique_id "aZmv6BD12ciBDK59nTzunAAAAAI"] [Sat Feb 21 18:15:21.030283 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php_bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php_bk"] [unique_id "aZmv6fbcvcVq9UDymdkLIwAAAAY"] [Sat Feb 21 18:15:21.948112 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php_old"] [unique_id "aZmv6R09CmUltJs1PthbuQAAAAE"] [Sat Feb 21 18:15:22.040715 2026] [security2:error] [pid 2172634:tid 2172634] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmv6Jpe9KOFdAtIQx5nggAAAAw"], referer: https://mukyasenergy.com/wp-login.php [Sat Feb 21 18:15:22.040783 2026] [security2:error] [pid 2172634:tid 2172634] [client 179.43.159.170:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/wp-admin/index.php"] [unique_id "aZmv6Jpe9KOFdAtIQx5nggAAAAw"], referer: https://mukyasenergy.com/wp-login.php [Sat Feb 21 18:15:22.044493 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/demo/.env"] [unique_id "aZmv6lMqSo7iS-0AaIsVlAAAABM"] [Sat Feb 21 18:15:22.878445 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/demo/.env"] [unique_id "aZmv6h09CmUltJs1PthbugAAAAE"] [Sat Feb 21 18:15:22.884562 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php_save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wordpress/wp-config.php_save"] [unique_id "aZmv6hD12ciBDK59nTzunQAAAAI"] [Sat Feb 21 18:15:23.841865 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php_"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php_"] [unique_id "aZmv606p3qDPpdImXz_taQAAABE"] [Sat Feb 21 18:15:24.807864 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php"] [unique_id "aZmv7GxG-ZG_tIvrf97mWQAAAAM"] [Sat Feb 21 18:15:24.900872 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmv7PPgItFgXMKgTSvkqAAAAAk"] [Sat Feb 21 18:15:24.900942 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmv7PPgItFgXMKgTSvkqAAAAAk"] [Sat Feb 21 18:15:25.760429 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php~"] [unique_id "aZmv7R09CmUltJs1PthbvAAAAAE"] [Sat Feb 21 18:15:26.733366 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/._wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/._wp-config.php"] [unique_id "aZmv7k6p3qDPpdImXz_tbAAAABE"] [Sat Feb 21 18:15:27.729003 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/.wp-config.php.swm"] [unique_id "aZmv73pA9eipntFQcueA5AAAABI"] [Sat Feb 21 18:15:28.176101 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/deploy/.env"] [unique_id "aZmv8Dgyub9jMIOPIArw9QAAAAc"] [Sat Feb 21 18:15:28.725940 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/.wp-config.php.swn"] [unique_id "aZmv8FMqSo7iS-0AaIsVlwAAABM"] [Sat Feb 21 18:15:28.984081 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /deploy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/deploy/.env"] [unique_id "aZmv8EuKN3Bz1O6Cf-gHywAAAAA"] [Sat Feb 21 18:15:29.641284 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/.wp-config.php.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/.wp-config.php.swp"] [unique_id "aZmv8VMqSo7iS-0AaIsVmAAAABM"] [Sat Feb 21 18:15:30.122954 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmv8EuKN3Bz1O6Cf-gHywAAAAA"] [Sat Feb 21 18:15:30.123010 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmv8EuKN3Bz1O6Cf-gHywAAAAA"] [Sat Feb 21 18:15:30.560177 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.bak"] [unique_id "aZmv8lMqSo7iS-0AaIsVmQAAABM"] [Sat Feb 21 18:15:30.560658 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp/wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.bak"] [unique_id "aZmv8lMqSo7iS-0AaIsVmQAAABM"] [Sat Feb 21 18:15:33.353483 2026] [security2:error] [pid 2187398:tid 2187398] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php-bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php-bak"] [unique_id "aZmv9UuKN3Bz1O6Cf-gHzQAAAAA"] [Sat Feb 21 18:15:34.266827 2026] [security2:error] [pid 2191386:tid 2191386] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.bk"] [unique_id "aZmv9jgyub9jMIOPIArw-gAAAAc"] [Sat Feb 21 18:15:34.379718 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dev-env/.env"] [unique_id "aZmv9h09CmUltJs1PthbwwAAAAE"] [Sat Feb 21 18:15:35.176799 2026] [security2:error] [pid 2188326:tid 2188326] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.saved"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.saved"] [unique_id "aZmv9_bcvcVq9UDymdkLLwAAAAY"] [Sat Feb 21 18:15:35.224585 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dev-env/.env"] [unique_id "aZmv91MqSo7iS-0AaIsVnAAAABM"] [Sat Feb 21 18:15:36.133401 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.old"] [unique_id "aZmv-BD12ciBDK59nTzupwAAAAI"] [Sat Feb 21 18:15:36.133911 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp/wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.old"] [unique_id "aZmv-BD12ciBDK59nTzupwAAAAI"] [Sat Feb 21 18:15:36.485134 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:15:37.074006 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.bak"] [unique_id "aZmv-WxG-ZG_tIvrf97mYQAAAAM"] [Sat Feb 21 18:15:38.028405 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.save"] [unique_id "aZmv-mxG-ZG_tIvrf97mYgAAAAM"] [Sat Feb 21 18:15:38.640149 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dev/.env.local"] [unique_id "aZmv-lMqSo7iS-0AaIsVngAAABM"] [Sat Feb 21 18:15:39.013578 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.orig"] [unique_id "aZmv-1AuKWjBndpBvNwYTwAAAAQ"] [Sat Feb 21 18:15:39.581414 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dev/.env.local"] [unique_id "aZmv-x09CmUltJs1PthbxgAAAAE"] [Sat Feb 21 18:15:39.958781 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.old"] [unique_id "aZmv-1AuKWjBndpBvNwYUAAAAAQ"] [Sat Feb 21 18:15:40.918115 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dev_env/.env"] [unique_id "aZmv_EuKN3Bz1O6Cf-gH0gAAAAA"] [Sat Feb 21 18:15:40.918476 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php-old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php-old"] [unique_id "aZmv_Jpe9KOFdAtIQx5njwAAAAw"] [Sat Feb 21 18:15:41.740406 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dev_env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dev_env/.env"] [unique_id "aZmv_R09CmUltJs1PthbxwAAAAE"] [Sat Feb 21 18:15:41.888793 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.original"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.original"] [unique_id "aZmv_XrZ_c8LouBrYfy65AAAAAU"] [Sat Feb 21 18:15:42.819336 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.dist"] [unique_id "aZmv_npA9eipntFQcueA7wAAABI"] [Sat Feb 21 18:15:43.812350 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp/wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.txt"] [unique_id "aZmv_3pA9eipntFQcueA8AAAABI"] [Sat Feb 21 18:15:44.650358 2026] [security2:error] [pid 2190764:tid 2190764] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwABD12ciBDK59nTzurgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:15:44.650440 2026] [security2:error] [pid 2190764:tid 2190764] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwABD12ciBDK59nTzurgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:15:44.795356 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.txt"] [unique_id "aZmwAGxG-ZG_tIvrf97maAAAAAM"] [Sat Feb 21 18:15:44.838171 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/developer/.env"] [unique_id "aZmwAHpA9eipntFQcueA8QAAABI"] [Sat Feb 21 18:15:45.676026 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/developer/.env"] [unique_id "aZmwAUuKN3Bz1O6Cf-gH1QAAAAA"] [Sat Feb 21 18:15:45.783403 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php.backup"] [unique_id "aZmwAWxG-ZG_tIvrf97maQAAAAM"] [Sat Feb 21 18:15:46.706860 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php_bck"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php_bck"] [unique_id "aZmwAmxG-ZG_tIvrf97magAAAAM"] [Sat Feb 21 18:15:46.943065 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/developerslv/.env"] [unique_id "aZmwAlAuKWjBndpBvNwYVQAAAAQ"] [Sat Feb 21 18:15:47.853840 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /developerslv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/developerslv/.env"] [unique_id "aZmwA_PgItFgXMKgTSvkugAAAAk"] [Sat Feb 21 18:15:48.591575 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php_bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php_bk"] [unique_id "aZmwBHpA9eipntFQcueA8wAAABI"] [Sat Feb 21 18:15:49.174177 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/development/.env"] [unique_id "aZmwBU6p3qDPpdImXz_tfAAAABE"] [Sat Feb 21 18:15:49.544197 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php_old"] [unique_id "aZmwBXpA9eipntFQcueA9AAAABI"] [Sat Feb 21 18:15:49.974767 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /development/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/development/.env"] [unique_id "aZmwBfPgItFgXMKgTSvkuwAAAAk"] [Sat Feb 21 18:15:50.469791 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp/wp-config.php_save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp/wp-config.php_save"] [unique_id "aZmwBmxG-ZG_tIvrf97mbQAAAAM"] [Sat Feb 21 18:15:51.448392 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php_"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php_"] [unique_id "aZmwB3pA9eipntFQcueA9gAAABI"] [Sat Feb 21 18:15:52.374988 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php"] [unique_id "aZmwCHrZ_c8LouBrYfy67QAAAAU"] [Sat Feb 21 18:15:52.710618 2026] [security2:error] [pid 2190248:tid 2190248] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmwB06p3qDPpdImXz_tfgAAABE"] [Sat Feb 21 18:15:52.710724 2026] [security2:error] [pid 2190248:tid 2190248] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmwB06p3qDPpdImXz_tfgAAABE"] [Sat Feb 21 18:15:53.294550 2026] [security2:error] [pid 2190249:tid 2190249] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-global": Permission denied [hostname "www.mrxdc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aZmwCHpA9eipntFQcueA9wAAABI"] [Sat Feb 21 18:15:53.294601 2026] [security2:error] [pid 2190249:tid 2190249] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mrxdc-ip": Permission denied [hostname "www.mrxdc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aZmwCHpA9eipntFQcueA9wAAABI"] [Sat Feb 21 18:15:53.338210 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php~"] [unique_id "aZmwCVMqSo7iS-0AaIsVqAAAABM"] [Sat Feb 21 18:15:54.286999 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/.wp-config.php.swm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/.wp-config.php.swm"] [unique_id "aZmwChD12ciBDK59nTzutwAAAAI"] [Sat Feb 21 18:15:55.223438 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/.wp-config.php.swn"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/.wp-config.php.swn"] [unique_id "aZmwCxD12ciBDK59nTzuuAAAAAI"] [Sat Feb 21 18:15:55.552746 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/directories/.env"] [unique_id "aZmwC5pe9KOFdAtIQx5nmQAAAAw"] [Sat Feb 21 18:15:56.179784 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/.wp-config.php.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/.wp-config.php.swp"] [unique_id "aZmwDB09CmUltJs1Pthb0gAAAAE"] [Sat Feb 21 18:15:56.439297 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /directories/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/directories/.env"] [unique_id "aZmwDGxG-ZG_tIvrf97mcQAAAAM"] [Sat Feb 21 18:15:57.114631 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.bak"] [unique_id "aZmwDR09CmUltJs1Pthb0wAAAAE"] [Sat Feb 21 18:15:57.114906 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /blog/wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.bak"] [unique_id "aZmwDR09CmUltJs1Pthb0wAAAAE"] [Sat Feb 21 18:15:57.664024 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dist/.env"] [unique_id "aZmwDR09CmUltJs1Pthb1AAAAAE"] [Sat Feb 21 18:15:58.473353 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dist/.env"] [unique_id "aZmwDmxG-ZG_tIvrf97mcgAAAAM"] [Sat Feb 21 18:15:59.957100 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php-bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php-bak"] [unique_id "aZmwD1AuKWjBndpBvNwYYAAAAAQ"] [Sat Feb 21 18:16:00.913508 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.bk"] [unique_id "aZmwEFAuKWjBndpBvNwYYQAAAAQ"] [Sat Feb 21 18:16:01.863966 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.saved"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.saved"] [unique_id "aZmwEXrZ_c8LouBrYfy69gAAAAU"] [Sat Feb 21 18:16:02.269441 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/django-blog/.env"] [unique_id "aZmwEmxG-ZG_tIvrf97mdQAAAAM"] [Sat Feb 21 18:16:02.733058 2026] [access_compat:error] [pid 2178036:tid 2178036] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:16:02.808900 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.sav"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.sav"] [unique_id "aZmwEnpA9eipntFQcueA_AAAABI"] [Sat Feb 21 18:16:03.241052 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django-blog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/django-blog/.env"] [unique_id "aZmwE3rZ_c8LouBrYfy6-AAAAAU"] [Sat Feb 21 18:16:03.763298 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.old"] [unique_id "aZmwE2xG-ZG_tIvrf97mdgAAAAM"] [Sat Feb 21 18:16:03.763691 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /blog/wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.old"] [unique_id "aZmwE2xG-ZG_tIvrf97mdgAAAAM"] [Sat Feb 21 18:16:04.254505 2026] [security2:error] [pid 2187398:tid 2187398] [client 87.106.33.160:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmwEkuKN3Bz1O6Cf-gH4QAAAAA"], referer: www.google.com [Sat Feb 21 18:16:04.254578 2026] [security2:error] [pid 2187398:tid 2187398] [client 87.106.33.160:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmwEkuKN3Bz1O6Cf-gH4QAAAAA"], referer: www.google.com [Sat Feb 21 18:16:04.692361 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.bak"] [unique_id "aZmwFGxG-ZG_tIvrf97mdwAAAAM"] [Sat Feb 21 18:16:04.696069 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/django/.env"] [unique_id "aZmwFBD12ciBDK59nTzuwAAAAAI"] [Sat Feb 21 18:16:05.592746 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/django/.env"] [unique_id "aZmwFVMqSo7iS-0AaIsVsgAAABM"] [Sat Feb 21 18:16:05.630675 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.save"] [unique_id "aZmwFXrZ_c8LouBrYfy6-QAAAAU"] [Sat Feb 21 18:16:06.567341 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.orig"] [unique_id "aZmwFhD12ciBDK59nTzuwQAAAAI"] [Sat Feb 21 18:16:06.979232 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/django_project_path/.env"] [unique_id "aZmwFnpA9eipntFQcueA_wAAABI"] [Sat Feb 21 18:16:07.491756 2026] [security2:error] [pid 2190764:tid 2190764] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.old"] [unique_id "aZmwFxD12ciBDK59nTzuwgAAAAI"] [Sat Feb 21 18:16:07.866288 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /django_project_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/django_project_path/.env"] [unique_id "aZmwFzgyub9jMIOPIArxEQAAAAc"] [Sat Feb 21 18:16:08.414100 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php-old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php-old"] [unique_id "aZmwGB09CmUltJs1Pthb3AAAAAE"] [Sat Feb 21 18:16:09.316206 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/doc/.env"] [unique_id "aZmwGWxG-ZG_tIvrf97megAAAAM"] [Sat Feb 21 18:16:09.328734 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.original"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.original"] [unique_id "aZmwGZpe9KOFdAtIQx5nowAAAAw"] [Sat Feb 21 18:16:10.160718 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/doc/.env"] [unique_id "aZmwGjgyub9jMIOPIArxEgAAAAc"] [Sat Feb 21 18:16:10.248417 2026] [security2:error] [pid 2172634:tid 2172634] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.dist"] [unique_id "aZmwGppe9KOFdAtIQx5npAAAAAw"] [Sat Feb 21 18:16:11.222752 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /blog/wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.txt"] [unique_id "aZmwG1MqSo7iS-0AaIsVtgAAABM"] [Sat Feb 21 18:16:12.165735 2026] [security2:error] [pid 2190250:tid 2190250] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.txt"] [unique_id "aZmwHFMqSo7iS-0AaIsVtwAAABM"] [Sat Feb 21 18:16:13.075031 2026] [security2:error] [pid 2178036:tid 2178036] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php.backup"] [unique_id "aZmwHR09CmUltJs1Pthb3wAAAAE"] [Sat Feb 21 18:16:13.711508 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker-compose/.env"] [unique_id "aZmwHXrZ_c8LouBrYfy7AAAAAAU"] [Sat Feb 21 18:16:14.050646 2026] [security2:error] [pid 2191386:tid 2191386] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php_bck"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php_bck"] [unique_id "aZmwHjgyub9jMIOPIArxFQAAAAc"] [Sat Feb 21 18:16:14.587554 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker-compose/.env"] [unique_id "aZmwHkuKN3Bz1O6Cf-gH6QAAAAA"] [Sat Feb 21 18:16:15.709405 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker-compose/platform/.env"] [unique_id "aZmwH3rZ_c8LouBrYfy7AQAAAAU"] [Sat Feb 21 18:16:15.909781 2026] [security2:error] [pid 2190227:tid 2190227] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php_bk"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php_bk"] [unique_id "aZmwH2xG-ZG_tIvrf97mfwAAAAM"] [Sat Feb 21 18:16:16.587686 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-compose/platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker-compose/platform/.env"] [unique_id "aZmwIPPgItFgXMKgTSvkzAAAAAk"] [Sat Feb 21 18:16:16.897392 2026] [security2:error] [pid 2191386:tid 2191386] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php_old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php_old"] [unique_id "aZmwIDgyub9jMIOPIArxFwAAAAc"] [Sat Feb 21 18:16:17.846233 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker-elk/.env"] [unique_id "aZmwITgyub9jMIOPIArxGAAAAAc"] [Sat Feb 21 18:16:17.855821 2026] [security2:error] [pid 2190249:tid 2190249] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php_save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/blog/wp-config.php_save"] [unique_id "aZmwIXpA9eipntFQcueBBwAAABI"] [Sat Feb 21 18:16:18.725470 2026] [security2:error] [pid 2190248:tid 2190248] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-elk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker-elk/.env"] [unique_id "aZmwIk6p3qDPpdImXz_tkAAAABE"] [Sat Feb 21 18:16:19.920331 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "aZmwIxD12ciBDK59nTzuzwAAAAI"] [Sat Feb 21 18:16:20.700978 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-network-healthcheck/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "aZmwJPPgItFgXMKgTSvk0AAAAAk"] [Sat Feb 21 18:16:21.154349 2026] [proxy_fcgi:error] [pid 2190227:tid 2190227] [client 87.106.33.160:0] AH01071: Got error 'Primary script unknown', referer: www.google.com [Sat Feb 21 18:16:21.172848 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwJXrZ_c8LouBrYfy7BQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:16:21.172947 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwJXrZ_c8LouBrYfy7BQAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:16:21.951678 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "aZmwJR09CmUltJs1Pthb5wAAAAE"] [Sat Feb 21 18:16:22.763488 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker-node-mongo-redis/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "aZmwJppe9KOFdAtIQx5nrwAAAAw"] [Sat Feb 21 18:16:23.611904 2026] [security2:error] [pid 2190248:tid 2190248] [client 157.66.54.26:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "cybercraft.biz"] [uri "/config.old"] [unique_id "aZmwJ06p3qDPpdImXz_tlAAAABE"] [Sat Feb 21 18:16:23.958471 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "aZmwJ_PgItFgXMKgTSvk0gAAAAk"] [Sat Feb 21 18:16:24.537476 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:16:24.792231 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withmongo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "aZmwKB09CmUltJs1Pthb6QAAAAE"] [Sat Feb 21 18:16:26.021009 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "aZmwKmxG-ZG_tIvrf97mhwAAAAM"] [Sat Feb 21 18:16:26.860834 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/compose/withpostgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "aZmwKh09CmUltJs1Pthb6gAAAAE"] [Sat Feb 21 18:16:28.130063 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/database/.env"] [unique_id "aZmwLJpe9KOFdAtIQx5nswAAAAw"] [Sat Feb 21 18:16:28.976784 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/database/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/database/.env"] [unique_id "aZmwLEuKN3Bz1O6Cf-gH8QAAAAA"] [Sat Feb 21 18:16:30.279747 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/db/.env"] [unique_id "aZmwLnpA9eipntFQcueBEAAAABI"] [Sat Feb 21 18:16:31.079387 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/db/.env"] [unique_id "aZmwLxD12ciBDK59nTzu2AAAAAI"] [Sat Feb 21 18:16:31.159395 2026] [security2:error] [pid 2191386:tid 2191386] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php_bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php_bak"] [unique_id "aZmwLzgyub9jMIOPIArxIAAAAAc"] [Sat Feb 21 18:16:32.272132 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/dev/.env"] [unique_id "aZmwMHrZ_c8LouBrYfy7EQAAAAU"] [Sat Feb 21 18:16:33.152575 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/dev/.env"] [unique_id "aZmwMVMqSo7iS-0AaIsVyQAAABM"] [Sat Feb 21 18:16:33.937177 2026] [security2:error] [pid 2190981:tid 2190981] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.default"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/wp-config.php.default"] [unique_id "aZmwMXrZ_c8LouBrYfy7EgAAAAU"] [Sat Feb 21 18:16:34.374690 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/examples/compose/.env"] [unique_id "aZmwMhD12ciBDK59nTzu2wAAAAI"] [Sat Feb 21 18:16:34.739420 2026] [proxy_fcgi:error] [pid 2173288:tid 2173288] [client 87.106.33.160:0] AH01071: Got error 'Primary script unknown', referer: www.google.com [Sat Feb 21 18:16:34.859343 2026] [security2:error] [pid 2118467:tid 2118467] [client 157.66.54.26:0] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "cybercraft.biz"] [uri "/sftp-config.json"] [unique_id "aZmwMlAuKWjBndpBvNwYfQAAAAQ"] [Sat Feb 21 18:16:35.175670 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/examples/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/examples/compose/.env"] [unique_id "aZmwM5pe9KOFdAtIQx5nuAAAAAw"] [Sat Feb 21 18:16:36.342383 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/postgres/.env"] [unique_id "aZmwNPPgItFgXMKgTSvk3AAAAAk"] [Sat Feb 21 18:16:37.201949 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/postgres/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/postgres/.env"] [unique_id "aZmwNWxG-ZG_tIvrf97mjwAAAAM"] [Sat Feb 21 18:16:38.428182 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docker/webdav/.env"] [unique_id "aZmwNnpA9eipntFQcueBFgAAABI"] [Sat Feb 21 18:16:39.316038 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docker/webdav/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docker/webdav/.env"] [unique_id "aZmwN3rZ_c8LouBrYfy7GAAAAAU"] [Sat Feb 21 18:16:44.780584 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/docs/.env"] [unique_id "aZmwPBD12ciBDK59nTzu4gAAAAI"] [Sat Feb 21 18:16:45.614057 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/docs/.env"] [unique_id "aZmwPTgyub9jMIOPIArxKgAAAAc"] [Sat Feb 21 18:16:46.827299 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dodoswap-client/.env"] [unique_id "aZmwPmxG-ZG_tIvrf97mlgAAAAM"] [Sat Feb 21 18:16:47.232856 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 87.106.33.160:0] AH01071: Got error 'Primary script unknown', referer: www.google.com [Sat Feb 21 18:16:47.606595 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dodoswap-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dodoswap-client/.env"] [unique_id "aZmwPxD12ciBDK59nTzu5AAAAAI"] [Sat Feb 21 18:16:48.766286 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/dotfiles/.env"] [unique_id "aZmwQFMqSo7iS-0AaIsV1AAAABM"] [Sat Feb 21 18:16:49.557905 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwQTgyub9jMIOPIArxLAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:16:49.558012 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwQTgyub9jMIOPIArxLAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:16:49.568124 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /dotfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/dotfiles/.env"] [unique_id "aZmwQZpe9KOFdAtIQx5nwgAAAAw"] [Sat Feb 21 18:16:50.714548 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /download/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/download/.env"] [unique_id "aZmwQhD12ciBDK59nTzu5gAAAAI"] [Sat Feb 21 18:16:51.463697 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /download/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/download/.env"] [unique_id "aZmwQ5pe9KOFdAtIQx5nwwAAAAw"] [Sat Feb 21 18:16:52.619139 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/downloads/.env"] [unique_id "aZmwRBD12ciBDK59nTzu5wAAAAI"] [Sat Feb 21 18:16:53.425829 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /downloads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/downloads/.env"] [unique_id "aZmwRVMqSo7iS-0AaIsV1wAAABM"] [Sat Feb 21 18:16:54.501561 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/drupal/.env"] [unique_id "aZmwRlAuKWjBndpBvNwYjAAAAAQ"] [Sat Feb 21 18:16:54.873341 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwRnpA9eipntFQcueBHgAAABI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:16:54.873399 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwRnpA9eipntFQcueBHgAAABI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:16:55.285067 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /drupal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/drupal/.env"] [unique_id "aZmwRx09CmUltJs1Pthb_AAAAAE"] [Sat Feb 21 18:16:56.474673 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/dump.sql"] [unique_id "aZmwSDgyub9jMIOPIArxMgAAAAc"] [Sat Feb 21 18:16:57.300822 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/dump.sql"] [unique_id "aZmwSXrZ_c8LouBrYfy7IwAAAAU"] [Sat Feb 21 18:16:58.461511 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/e2e/.env"] [unique_id "aZmwSlMqSo7iS-0AaIsV2QAAABM"] [Sat Feb 21 18:16:59.338106 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /e2e/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/e2e/.env"] [unique_id "aZmwS_PgItFgXMKgTSvk6wAAAAk"] [Sat Feb 21 18:17:00.657127 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/en/.env"] [unique_id "aZmwTFMqSo7iS-0AaIsV2gAAABM"] [Sat Feb 21 18:17:01.717838 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /en/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/en/.env"] [unique_id "aZmwTTgyub9jMIOPIArxNQAAAAc"] [Sat Feb 21 18:17:03.584489 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /engine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/engine/.env"] [unique_id "aZmwT1AuKWjBndpBvNwYkQAAAAQ"] [Sat Feb 21 18:17:04.630215 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /engine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/engine/.env"] [unique_id "aZmwUJpe9KOFdAtIQx5nyQAAAAw"] [Sat Feb 21 18:17:12.140757 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "aZmwWGxG-ZG_tIvrf97mpgAAAAM"] [Sat Feb 21 18:17:13.099434 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/mariadb-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "aZmwWR09CmUltJs1PthcBAAAAAE"] [Sat Feb 21 18:17:14.302754 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "aZmwWppe9KOFdAtIQx5nzgAAAAw"] [Sat Feb 21 18:17:15.182688 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/dockers/php-apache/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "aZmwW1MqSo7iS-0AaIsV4QAAABM"] [Sat Feb 21 18:17:16.593704 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/env/example/.env"] [unique_id "aZmwXJpe9KOFdAtIQx5nzwAAAAw"] [Sat Feb 21 18:17:17.474068 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/env/example/.env"] [unique_id "aZmwXWxG-ZG_tIvrf97mqQAAAAM"] [Sat Feb 21 18:17:18.753024 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/env/template/.env"] [unique_id "aZmwXvPgItFgXMKgTSvk9QAAAAk"] [Sat Feb 21 18:17:19.632133 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /env/template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/env/template/.env"] [unique_id "aZmwX1MqSo7iS-0AaIsV4wAAABM"] [Sat Feb 21 18:17:20.868051 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/environments/local/.env"] [unique_id "aZmwYEuKN3Bz1O6Cf-gIEgAAAAA"] [Sat Feb 21 18:17:21.721852 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/local/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/environments/local/.env"] [unique_id "aZmwYWxG-ZG_tIvrf97mqwAAAAM"] [Sat Feb 21 18:17:22.834697 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/environments/production/.env"] [unique_id "aZmwYhD12ciBDK59nTzu-AAAAAI"] [Sat Feb 21 18:17:23.269151 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwY0uKN3Bz1O6Cf-gIEwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 18:17:23.269257 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwY0uKN3Bz1O6Cf-gIEwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3 [Sat Feb 21 18:17:23.598261 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /environments/production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/environments/production/.env"] [unique_id "aZmwYx09CmUltJs1PthcCQAAAAE"] [Sat Feb 21 18:17:24.329935 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwZHrZ_c8LouBrYfy7MQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem [Sat Feb 21 18:17:24.329997 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwZHrZ_c8LouBrYfy7MQAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem [Sat Feb 21 18:17:24.899632 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /envs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/envs/.env"] [unique_id "aZmwZHpA9eipntFQcueBLwAAABI"] [Sat Feb 21 18:17:25.660523 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /envs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/envs/.env"] [unique_id "aZmwZfPgItFgXMKgTSvk-QAAAAk"] [Sat Feb 21 18:17:26.723139 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/error.log"] [unique_id "aZmwZjgyub9jMIOPIArxQwAAAAc"] [Sat Feb 21 18:17:27.466922 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/error.log"] [unique_id "aZmwZ1AuKWjBndpBvNwYngAAAAQ"] [Sat Feb 21 18:17:28.870325 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/error/.env"] [unique_id "aZmwaBD12ciBDK59nTzu-wAAAAI"] [Sat Feb 21 18:17:29.680130 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /error/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/error/.env"] [unique_id "aZmwaWxG-ZG_tIvrf97mrwAAAAM"] [Sat Feb 21 18:17:30.752552 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/errors/.env"] [unique_id "aZmwanrZ_c8LouBrYfy7NQAAAAU"] [Sat Feb 21 18:17:31.557156 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /errors/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/errors/.env"] [unique_id "aZmwa1AuKWjBndpBvNwYoAAAAAQ"] [Sat Feb 21 18:17:32.734159 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/example/.env"] [unique_id "aZmwbFMqSo7iS-0AaIsV6wAAABM"] [Sat Feb 21 18:17:33.609510 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/example/.env"] [unique_id "aZmwbR09CmUltJs1PthcDwAAAAE"] [Sat Feb 21 18:17:34.721643 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "aZmwblMqSo7iS-0AaIsV7AAAABM"] [Sat Feb 21 18:17:35.542572 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example02-golang-package/import-underscore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "aZmwb0uKN3Bz1O6Cf-gIGgAAAAA"] [Sat Feb 21 18:17:36.605255 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "aZmwcHpA9eipntFQcueBNQAAABI"] [Sat Feb 21 18:17:37.388687 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample01/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "aZmwcTgyub9jMIOPIArxSQAAAAc"] [Sat Feb 21 18:17:38.653779 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "aZmwclAuKWjBndpBvNwYpAAAAAQ"] [Sat Feb 21 18:17:39.421528 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /example27-how-to-load-env/sample02/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "aZmwc3rZ_c8LouBrYfy7OwAAAAU"] [Sat Feb 21 18:17:39.551734 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:17:40.726263 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/.env"] [unique_id "aZmwdJpe9KOFdAtIQx5n3AAAAAw"] [Sat Feb 21 18:17:41.525828 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/.env"] [unique_id "aZmwdRD12ciBDK59nTzvAwAAAAI"] [Sat Feb 21 18:17:42.674198 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/01-simple-model/.env"] [unique_id "aZmwdkuKN3Bz1O6Cf-gIHgAAAAA"] [Sat Feb 21 18:17:43.602890 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/01-simple-model/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/01-simple-model/.env"] [unique_id "aZmwd3pA9eipntFQcueBOgAAABI"] [Sat Feb 21 18:17:44.778453 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/02-complex-example/.env"] [unique_id "aZmweHrZ_c8LouBrYfy7PgAAAAU"] [Sat Feb 21 18:17:45.573316 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/02-complex-example/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/02-complex-example/.env"] [unique_id "aZmweVMqSo7iS-0AaIsV8wAAABM"] [Sat Feb 21 18:17:46.785129 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "aZmwekuKN3Bz1O6Cf-gIIAAAAAA"] [Sat Feb 21 18:17:47.542022 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/03-one-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "aZmwe_PgItFgXMKgTSvlAQAAAAk"] [Sat Feb 21 18:17:48.716383 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "aZmwfHpA9eipntFQcueBPAAAABI"] [Sat Feb 21 18:17:49.476616 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/04-many-to-many-relationship/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "aZmwfWxG-ZG_tIvrf97mugAAAAM"] [Sat Feb 21 18:17:50.573906 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/05-migrations/.env"] [unique_id "aZmwfh09CmUltJs1PthcGgAAAAE"] [Sat Feb 21 18:17:51.495292 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/05-migrations/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/05-migrations/.env"] [unique_id "aZmwfzgyub9jMIOPIArxUQAAAAc"] [Sat Feb 21 18:17:52.817951 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/06-base-service/.env"] [unique_id "aZmwgB09CmUltJs1PthcGwAAAAE"] [Sat Feb 21 18:17:53.788911 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/06-base-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/06-base-service/.env"] [unique_id "aZmwgTgyub9jMIOPIArxUgAAAAc"] [Sat Feb 21 18:17:54.886600 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "aZmwgh09CmUltJs1PthcHAAAAAE"] [Sat Feb 21 18:17:55.756248 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/07-feature-flags/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "aZmwg5pe9KOFdAtIQx5n5QAAAAw"] [Sat Feb 21 18:17:57.072970 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/08-performance/.env"] [unique_id "aZmwhUuKN3Bz1O6Cf-gIJgAAAAA"] [Sat Feb 21 18:17:57.875721 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/08-performance/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/08-performance/.env"] [unique_id "aZmwhTgyub9jMIOPIArxVAAAAAc"] [Sat Feb 21 18:17:59.172469 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/09-production/.env"] [unique_id "aZmwhx09CmUltJs1PthcHgAAAAE"] [Sat Feb 21 18:17:59.954916 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/09-production/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/09-production/.env"] [unique_id "aZmwh5pe9KOFdAtIQx5n5wAAAAw"] [Sat Feb 21 18:18:01.324903 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "aZmwiR09CmUltJs1PthcHwAAAAE"] [Sat Feb 21 18:18:01.985711 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/x.php [Sat Feb 21 18:18:02.330292 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/10-subscriptions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "aZmwippe9KOFdAtIQx5n6AAAAAw"] [Sat Feb 21 18:18:02.751212 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/chosen.php [Sat Feb 21 18:18:03.475144 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/11-transactions/.env"] [unique_id "aZmwi1MqSo7iS-0AaIsV_gAAABM"] [Sat Feb 21 18:18:04.267830 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwjHrZ_c8LouBrYfy7SgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:18:04.267947 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwjHrZ_c8LouBrYfy7SgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:18:04.273500 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/11-transactions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/11-transactions/.env"] [unique_id "aZmwjJpe9KOFdAtIQx5n6QAAAAw"] [Sat Feb 21 18:18:05.354874 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "aZmwjVMqSo7iS-0AaIsV_wAAABM"] [Sat Feb 21 18:18:06.300222 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/drupal-separate-services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "aZmwjkuKN3Bz1O6Cf-gILAAAAAA"] [Sat Feb 21 18:18:07.625480 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "aZmwj3pA9eipntFQcueBRgAAABI"] [Sat Feb 21 18:18:08.412655 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/react-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "aZmwkPPgItFgXMKgTSvlDgAAAAk"] [Sat Feb 21 18:18:09.679393 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/sdl-first/.env"] [unique_id "aZmwkVMqSo7iS-0AaIsWAQAAABM"] [Sat Feb 21 18:18:10.480331 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/sdl-first/.env"] [unique_id "aZmwkjgyub9jMIOPIArxXAAAAAc"] [Sat Feb 21 18:18:11.652131 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "aZmwk5pe9KOFdAtIQx5n7QAAAAw"] [Sat Feb 21 18:18:12.759329 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/sdl-first/prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "aZmwlFAuKWjBndpBvNwYuAAAAAQ"] [Sat Feb 21 18:18:12.827192 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwlHpA9eipntFQcueBSAAAABI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:18:12.827293 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmwlHpA9eipntFQcueBSAAAABI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:18:14.061407 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "aZmwlh09CmUltJs1PthcJgAAAAE"] [Sat Feb 21 18:18:14.836494 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/vue-dashboard/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "aZmwljgyub9jMIOPIArxXgAAAAc"] [Sat Feb 21 18:18:15.988432 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/web/.env"] [unique_id "aZmwlx09CmUltJs1PthcJwAAAAE"] [Sat Feb 21 18:18:16.854446 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/web/.env"] [unique_id "aZmwmHpA9eipntFQcueBSwAAABI"] [Sat Feb 21 18:18:17.138599 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/okxh.php [Sat Feb 21 18:18:17.866505 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/shell20211028.php [Sat Feb 21 18:18:18.109839 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "aZmwmlAuKWjBndpBvNwYuwAAAAQ"] [Sat Feb 21 18:18:18.570463 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/zqhfn.php [Sat Feb 21 18:18:18.905350 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-cookie-auth-fauna/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "aZmwmjgyub9jMIOPIArxYgAAAAc"] [Sat Feb 21 18:18:20.081935 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/with-dotenv/.env"] [unique_id "aZmwnHpA9eipntFQcueBTgAAABI"] [Sat Feb 21 18:18:20.885143 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-dotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/with-dotenv/.env"] [unique_id "aZmwnPPgItFgXMKgTSvlFwAAAAk"] [Sat Feb 21 18:18:22.015842 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "aZmwnmxG-ZG_tIvrf97mzwAAAAM"] [Sat Feb 21 18:18:22.806590 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-firebase-authentication-serverless/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "aZmwnlMqSo7iS-0AaIsWDQAAABM"] [Sat Feb 21 18:18:23.933760 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "aZmwn_PgItFgXMKgTSvlGQAAAAk"] [Sat Feb 21 18:18:24.804340 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-react-relay-network-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "aZmwoFMqSo7iS-0AaIsWDgAAABM"] [Sat Feb 21 18:18:25.928293 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "aZmwoZpe9KOFdAtIQx5n-gAAAAw"] [Sat Feb 21 18:18:26.738489 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-relay-modern/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "aZmwoh09CmUltJs1PthcMAAAAAE"] [Sat Feb 21 18:18:28.003257 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "aZmwpEuKN3Bz1O6Cf-gIPwAAAAA"] [Sat Feb 21 18:18:28.800546 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /examples/with-universal-configuration-build-time/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "aZmwpFMqSo7iS-0AaIsWEQAAABM"] [Sat Feb 21 18:18:30.100539 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/exapi/.env"] [unique_id "aZmwph09CmUltJs1PthcMwAAAAE"] [Sat Feb 21 18:18:30.943301 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/exapi/.env"] [unique_id "aZmwplMqSo7iS-0AaIsWEgAAABM"] [Sat Feb 21 18:18:32.107574 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/k.php [Sat Feb 21 18:18:32.369149 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Exercise.Frontend/.env"] [unique_id "aZmwqHpA9eipntFQcueBWgAAABI"] [Sat Feb 21 18:18:33.271169 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Exercise.Frontend/.env"] [unique_id "aZmwqUuKN3Bz1O6Cf-gIRAAAAAA"] [Sat Feb 21 18:18:34.427769 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZmwqh09CmUltJs1PthcNgAAAAE"] [Sat Feb 21 18:18:35.229650 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /exercise.frontend/train/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "aZmwq0uKN3Bz1O6Cf-gIRQAAAAA"] [Sat Feb 21 18:18:36.395902 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/export/.env"] [unique_id "aZmwrHpA9eipntFQcueBXQAAABI"] [Sat Feb 21 18:18:37.236171 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /export/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/export/.env"] [unique_id "aZmwrR09CmUltJs1PthcOAAAAAE"] [Sat Feb 21 18:18:38.338040 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fastlane/.env"] [unique_id "aZmwrmxG-ZG_tIvrf97m3wAAAAM"] [Sat Feb 21 18:18:39.056231 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fastlane/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fastlane/.env"] [unique_id "aZmwrx09CmUltJs1PthcOQAAAAE"] [Sat Feb 21 18:18:40.286010 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/favicons/.env"] [unique_id "aZmwsFAuKWjBndpBvNwY0QAAAAQ"] [Sat Feb 21 18:18:41.380115 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favicons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/favicons/.env"] [unique_id "aZmwsWxG-ZG_tIvrf97m4gAAAAM"] [Sat Feb 21 18:18:41.496886 2026] [security2:error] [pid 2190249:tid 2190249] [client 23.100.90.148:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/test.php"] [unique_id "aZmwsXpA9eipntFQcueBYQAAABI"] [Sat Feb 21 18:18:41.497005 2026] [security2:error] [pid 2190249:tid 2190249] [client 23.100.90.148:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/test.php"] [unique_id "aZmwsXpA9eipntFQcueBYQAAABI"] [Sat Feb 21 18:18:42.607835 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/favs/.env"] [unique_id "aZmwshD12ciBDK59nTzvKwAAAAI"] [Sat Feb 21 18:18:43.430157 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /favs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/favs/.env"] [unique_id "aZmws3rZ_c8LouBrYfy7bgAAAAU"] [Sat Feb 21 18:18:44.725647 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/FE/huey/.env"] [unique_id "aZmwtB09CmUltJs1PthcPQAAAAE"] [Sat Feb 21 18:18:45.501665 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fe/huey/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/FE/huey/.env"] [unique_id "aZmwtWxG-ZG_tIvrf97m5QAAAAM"] [Sat Feb 21 18:18:46.029922 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/403.php [Sat Feb 21 18:18:46.118549 2026] [security2:error] [pid 2172634:tid 2172634] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmwtZpe9KOFdAtIQx5oDwAAAAw"] [Sat Feb 21 18:18:46.118677 2026] [security2:error] [pid 2172634:tid 2172634] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmwtZpe9KOFdAtIQx5oDwAAAAw"] [Sat Feb 21 18:18:46.697440 2026] [access_compat:error] [pid 2187398:tid 2187398] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/fimai.php [Sat Feb 21 18:18:46.776697 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fedex/.env"] [unique_id "aZmwtjgyub9jMIOPIArxewAAAAc"] [Sat Feb 21 18:18:47.374425 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/maul.php [Sat Feb 21 18:18:47.482826 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fedex/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fedex/.env"] [unique_id "aZmwt2xG-ZG_tIvrf97m5gAAAAM"] [Sat Feb 21 18:18:48.040963 2026] [access_compat:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/elp.php [Sat Feb 21 18:18:48.712355 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fhir-api/.env"] [unique_id "aZmwuEuKN3Bz1O6Cf-gIVAAAAAA"] [Sat Feb 21 18:18:48.739828 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/tt.php [Sat Feb 21 18:18:49.563668 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fhir-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fhir-api/.env"] [unique_id "aZmwuWxG-ZG_tIvrf97m5wAAAAM"] [Sat Feb 21 18:18:50.698733 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmwuWxG-ZG_tIvrf97m5wAAAAM"] [Sat Feb 21 18:18:50.698796 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmwuWxG-ZG_tIvrf97m5wAAAAM"] [Sat Feb 21 18:18:50.783677 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/files/.env"] [unique_id "aZmwuvPgItFgXMKgTSvlNQAAAAk"] [Sat Feb 21 18:18:51.541266 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/files/.env"] [unique_id "aZmwuzgyub9jMIOPIArxfwAAAAc"] [Sat Feb 21 18:18:52.702508 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fileserver/.env"] [unique_id "aZmwvPPgItFgXMKgTSvlNgAAAAk"] [Sat Feb 21 18:18:53.459383 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fileserver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fileserver/.env"] [unique_id "aZmwvWxG-ZG_tIvrf97m6gAAAAM"] [Sat Feb 21 18:18:54.551204 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/films/.env"] [unique_id "aZmwvlAuKWjBndpBvNwY3gAAAAQ"] [Sat Feb 21 18:18:55.402365 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /films/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/films/.env"] [unique_id "aZmwv1MqSo7iS-0AaIsWKQAAABM"] [Sat Feb 21 18:18:56.532492 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "aZmwwHpA9eipntFQcueBbgAAABI"] [Sat Feb 21 18:18:57.332818 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/airflow_dag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "aZmwwXrZ_c8LouBrYfy7eQAAAAU"] [Sat Feb 21 18:18:58.493968 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "aZmwwkuKN3Bz1O6Cf-gIWwAAAAA"] [Sat Feb 21 18:18:59.427632 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/kafka_twitter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "aZmww2xG-ZG_tIvrf97m7gAAAAM"] [Sat Feb 21 18:19:00.846444 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZmwxBD12ciBDK59nTzvOQAAAAI"] [Sat Feb 21 18:19:01.694977 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /final_project/startingfile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "aZmwxfPgItFgXMKgTSvlPAAAAAk"] [Sat Feb 21 18:19:03.041088 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "aZmwxzgyub9jMIOPIArxhgAAAAc"] [Sat Feb 21 18:19:04.014238 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /finalversion/lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "aZmwyFMqSo7iS-0AaIsWLwAAABM"] [Sat Feb 21 18:19:07.472909 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/first-network/.env"] [unique_id "aZmwyxD12ciBDK59nTzvPwAAAAI"] [Sat Feb 21 18:19:08.261368 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/first-network/.env"] [unique_id "aZmwzFMqSo7iS-0AaIsWMQAAABM"] [Sat Feb 21 18:19:09.710036 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "aZmwzWxG-ZG_tIvrf97m9gAAAAM"] [Sat Feb 21 18:19:10.565157 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /first_config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "aZmwzppe9KOFdAtIQx5oJAAAAAw"] [Sat Feb 21 18:19:11.634853 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fisdom/fisdom/.env"] [unique_id "aZmwz1MqSo7iS-0AaIsWMwAAABM"] [Sat Feb 21 18:19:12.579272 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fisdom/fisdom/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fisdom/fisdom/.env"] [unique_id "aZmw0GxG-ZG_tIvrf97m-AAAAAM"] [Sat Feb 21 18:19:13.702403 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fixtures/blocks/.env"] [unique_id "aZmw0UuKN3Bz1O6Cf-gIZQAAAAA"] [Sat Feb 21 18:19:14.528751 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/blocks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fixtures/blocks/.env"] [unique_id "aZmw0h09CmUltJs1PthcUgAAAAE"] [Sat Feb 21 18:19:15.402637 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/an.php [Sat Feb 21 18:19:15.839652 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "aZmw03pA9eipntFQcueBfgAAABI"] [Sat Feb 21 18:19:16.097817 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/orouu.php [Sat Feb 21 18:19:16.747700 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/fiber-debugger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "aZmw1GxG-ZG_tIvrf97m-gAAAAM"] [Sat Feb 21 18:19:16.775992 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/config.php [Sat Feb 21 18:19:17.461460 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/z.php [Sat Feb 21 18:19:17.865148 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fixtures/flight/.env"] [unique_id "aZmw1Zpe9KOFdAtIQx5oKgAAAAw"] [Sat Feb 21 18:19:18.154459 2026] [access_compat:error] [pid 2190981:tid 2190981] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/55b76.php [Sat Feb 21 18:19:18.636970 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/flight/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fixtures/flight/.env"] [unique_id "aZmw1vPgItFgXMKgTSvlSwAAAAk"] [Sat Feb 21 18:19:19.280140 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:19:19.849887 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "aZmw15pe9KOFdAtIQx5oLAAAAAw"] [Sat Feb 21 18:19:20.935190 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fixtures/kitchensink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "aZmw2Dgyub9jMIOPIArxlgAAAAc"] [Sat Feb 21 18:19:21.231767 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmw2XrZ_c8LouBrYfy7jwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3 [Sat Feb 21 18:19:21.231890 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmw2XrZ_c8LouBrYfy7jwAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3 [Sat Feb 21 18:19:21.234504 2026] [security2:error] [pid 2172634:tid 2172634] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/menu.php"] [unique_id "aZmw2Zpe9KOFdAtIQx5oLQAAAAw"] [Sat Feb 21 18:19:21.234543 2026] [security2:error] [pid 2172634:tid 2172634] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/menu.php"] [unique_id "aZmw2Zpe9KOFdAtIQx5oLQAAAAw"] [Sat Feb 21 18:19:22.315423 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/flask/.env"] [unique_id "aZmw2ppe9KOFdAtIQx5oLwAAAAw"] [Sat Feb 21 18:19:23.041271 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/flask/.env"] [unique_id "aZmw20uKN3Bz1O6Cf-gIbwAAAAA"] [Sat Feb 21 18:19:24.133791 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/flask_test_uploads/.env"] [unique_id "aZmw3HpA9eipntFQcueBggAAABI"] [Sat Feb 21 18:19:24.953593 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /flask_test_uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/flask_test_uploads/.env"] [unique_id "aZmw3PPgItFgXMKgTSvlUgAAAAk"] [Sat Feb 21 18:19:25.104440 2026] [security2:error] [pid 2191386:tid 2191386] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/ahax.php"] [unique_id "aZmw3Tgyub9jMIOPIArxnAAAAAc"] [Sat Feb 21 18:19:25.104510 2026] [security2:error] [pid 2191386:tid 2191386] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/ahax.php"] [unique_id "aZmw3Tgyub9jMIOPIArxnAAAAAc"] [Sat Feb 21 18:19:25.418147 2026] [security2:error] [pid 2190981:tid 2190981] [client 52.169.119.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rnrgadgets-global": Permission denied [hostname "rnrgadgets.com"] [uri "/sfcl.php"] [unique_id "aZmw3XrZ_c8LouBrYfy7lwAAAAU"] [Sat Feb 21 18:19:25.418218 2026] [security2:error] [pid 2190981:tid 2190981] [client 52.169.119.118:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rnrgadgets-ip": Permission denied [hostname "rnrgadgets.com"] [uri "/sfcl.php"] [unique_id "aZmw3XrZ_c8LouBrYfy7lwAAAAU"] [Sat Feb 21 18:19:25.728934 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:19:26.194249 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fm/.env"] [unique_id "aZmw3jgyub9jMIOPIArxngAAAAc"] [Sat Feb 21 18:19:27.008854 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fm/.env"] [unique_id "aZmw3xD12ciBDK59nTzvVwAAAAI"] [Sat Feb 21 18:19:28.141987 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/font-icons/.env"] [unique_id "aZmw4HrZ_c8LouBrYfy7mgAAAAU"] [Sat Feb 21 18:19:28.974366 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /font-icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/font-icons/.env"] [unique_id "aZmw4BD12ciBDK59nTzvWAAAAAI"] [Sat Feb 21 18:19:29.164008 2026] [security2:error] [pid 2173288:tid 2173288] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/inputs.php"] [unique_id "aZmw4fPgItFgXMKgTSvlVQAAAAk"] [Sat Feb 21 18:19:29.164094 2026] [security2:error] [pid 2173288:tid 2173288] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/inputs.php"] [unique_id "aZmw4fPgItFgXMKgTSvlVQAAAAk"] [Sat Feb 21 18:19:30.145613 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/fonts/.env"] [unique_id "aZmw4vPgItFgXMKgTSvlVgAAAAk"] [Sat Feb 21 18:19:31.289207 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /fonts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/fonts/.env"] [unique_id "aZmw43rZ_c8LouBrYfy7nAAAAAU"] [Sat Feb 21 18:19:31.291538 2026] [access_compat:error] [pid 2178036:tid 2178036] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/kalso.php [Sat Feb 21 18:19:31.980241 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/web.php [Sat Feb 21 18:19:32.532029 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /framework/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/framework/.env"] [unique_id "aZmw5Dgyub9jMIOPIArxogAAAAc"] [Sat Feb 21 18:19:32.679295 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/5b9ac.php [Sat Feb 21 18:19:33.285301 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /framework/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/framework/.env"] [unique_id "aZmw5XrZ_c8LouBrYfy7nQAAAAU"] [Sat Feb 21 18:19:33.361656 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/system.php [Sat Feb 21 18:19:34.412580 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/front-app/.env"] [unique_id "aZmw5hD12ciBDK59nTzvXQAAAAI"] [Sat Feb 21 18:19:35.303008 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/front-app/.env"] [unique_id "aZmw53pA9eipntFQcueBjwAAABI"] [Sat Feb 21 18:19:36.312361 2026] [security2:error] [pid 2190764:tid 2190764] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/filesss.php"] [unique_id "aZmw6BD12ciBDK59nTzvXgAAAAI"] [Sat Feb 21 18:19:36.312448 2026] [security2:error] [pid 2190764:tid 2190764] [client 20.189.202.89:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "amanda.247reactionpower.com"] [uri "/filesss.php"] [unique_id "aZmw6BD12ciBDK59nTzvXgAAAAI"] [Sat Feb 21 18:19:36.467415 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/front-empathy/.env"] [unique_id "aZmw6HrZ_c8LouBrYfy7nwAAAAU"] [Sat Feb 21 18:19:37.256627 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-empathy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/front-empathy/.env"] [unique_id "aZmw6Tgyub9jMIOPIArxpgAAAAc"] [Sat Feb 21 18:19:38.456828 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/front-end/.env"] [unique_id "aZmw6lMqSo7iS-0AaIsWUAAAABM"] [Sat Feb 21 18:19:39.198447 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/front-end/.env"] [unique_id "aZmw6zgyub9jMIOPIArxpwAAAAc"] [Sat Feb 21 18:19:40.357960 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/front/.env"] [unique_id "aZmw7GxG-ZG_tIvrf97nDgAAAAM"] [Sat Feb 21 18:19:41.226869 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/front/.env"] [unique_id "aZmw7VMqSo7iS-0AaIsWUgAAABM"] [Sat Feb 21 18:19:42.458476 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/front/src/.env"] [unique_id "aZmw7ppe9KOFdAtIQx5oPgAAAAw"] [Sat Feb 21 18:19:43.256306 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /front/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/front/src/.env"] [unique_id "aZmw72xG-ZG_tIvrf97nEAAAAAM"] [Sat Feb 21 18:19:44.473702 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "aZmw8HpA9eipntFQcueBlQAAABI"] [Sat Feb 21 18:19:44.915153 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmw8Dgyub9jMIOPIArxqwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:19:44.915208 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmw8Dgyub9jMIOPIArxqwAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:19:45.288883 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/momentum-fe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "aZmw8RD12ciBDK59nTzvZgAAAAI"] [Sat Feb 21 18:19:46.622758 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/frontend/react/.env"] [unique_id "aZmw8mxG-ZG_tIvrf97nEgAAAAM"] [Sat Feb 21 18:19:47.412929 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/frontend/react/.env"] [unique_id "aZmw83rZ_c8LouBrYfy7qAAAAAU"] [Sat Feb 21 18:19:47.583804 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/byp.php [Sat Feb 21 18:19:48.512990 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/frontend/vue/.env"] [unique_id "aZmw9FMqSo7iS-0AaIsWWAAAABM"] [Sat Feb 21 18:19:49.237938 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontend/vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/frontend/vue/.env"] [unique_id "aZmw9XpA9eipntFQcueBmQAAABI"] [Sat Feb 21 18:19:52.343506 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmw9zgyub9jMIOPIArxsAAAAAc"] [Sat Feb 21 18:19:52.343580 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmw9zgyub9jMIOPIArxsAAAAAc"] [Sat Feb 21 18:19:52.414766 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/frontendfinaltest/.env"] [unique_id "aZmw-GxG-ZG_tIvrf97nFgAAAAM"] [Sat Feb 21 18:19:53.173281 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /frontendfinaltest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/frontendfinaltest/.env"] [unique_id "aZmw-fPgItFgXMKgTSvlZgAAAAk"] [Sat Feb 21 18:19:53.234471 2026] [security2:error] [pid 2190764:tid 2190764] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmw-RD12ciBDK59nTzvawAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:19:53.234554 2026] [security2:error] [pid 2190764:tid 2190764] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmw-RD12ciBDK59nTzvawAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:19:54.299416 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ftp/.env"] [unique_id "aZmw-kuKN3Bz1O6Cf-gIigAAAAA"] [Sat Feb 21 18:19:55.238150 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ftp/.env"] [unique_id "aZmw-5pe9KOFdAtIQx5oRwAAAAw"] [Sat Feb 21 18:19:56.443151 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ftpmaster/.env"] [unique_id "aZmw_FMqSo7iS-0AaIsWXQAAABM"] [Sat Feb 21 18:19:57.229717 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ftpmaster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ftpmaster/.env"] [unique_id "aZmw_XpA9eipntFQcueBnwAAABI"] [Sat Feb 21 18:19:58.275295 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /functions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/functions/.env"] [unique_id "aZmw_h09CmUltJs1PthcdgAAAAE"] [Sat Feb 21 18:19:59.083758 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /functions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/functions/.env"] [unique_id "aZmw_3pA9eipntFQcueBoAAAABI"] [Sat Feb 21 18:20:03.463457 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gcp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/gcp/.env"] [unique_id "aZmxA0uKN3Bz1O6Cf-gIkAAAAAA"] [Sat Feb 21 18:20:04.454115 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /gcp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/gcp/.env"] [unique_id "aZmxBHpA9eipntFQcueBowAAABI"] [Sat Feb 21 18:20:13.079603 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/github-connect/.env"] [unique_id "aZmxDXrZ_c8LouBrYfy7uAAAAAU"] [Sat Feb 21 18:20:13.948151 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /github-connect/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/github-connect/.env"] [unique_id "aZmxDXpA9eipntFQcueBqQAAABI"] [Sat Feb 21 18:20:15.157934 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /google/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/google/.env"] [unique_id "aZmxD3rZ_c8LouBrYfy7uQAAAAU"] [Sat Feb 21 18:20:15.948053 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /google/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/google/.env"] [unique_id "aZmxD1AuKWjBndpBvNwZHwAAAAQ"] [Sat Feb 21 18:20:21.234560 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/grems-api/.env"] [unique_id "aZmxFRD12ciBDK59nTzvfgAAAAI"] [Sat Feb 21 18:20:22.198634 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/grems-api/.env"] [unique_id "aZmxFlMqSo7iS-0AaIsWbgAAABM"] [Sat Feb 21 18:20:23.462381 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/grems-frontend/.env"] [unique_id "aZmxF0uKN3Bz1O6Cf-gImQAAAAA"] [Sat Feb 21 18:20:24.192798 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /grems-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/grems-frontend/.env"] [unique_id "aZmxGHpA9eipntFQcueBsQAAABI"] [Sat Feb 21 18:20:25.388444 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Hash/.env"] [unique_id "aZmxGUuKN3Bz1O6Cf-gImgAAAAA"] [Sat Feb 21 18:20:26.213099 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hash/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Hash/.env"] [unique_id "aZmxGnrZ_c8LouBrYfy7vgAAAAU"] [Sat Feb 21 18:20:27.332306 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/hasura/.env"] [unique_id "aZmxG0uKN3Bz1O6Cf-gImwAAAAA"] [Sat Feb 21 18:20:28.187618 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hasura/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/hasura/.env"] [unique_id "aZmxHBD12ciBDK59nTzvggAAAAI"] [Sat Feb 21 18:20:31.409693 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Helmetjs/.env"] [unique_id "aZmxH5pe9KOFdAtIQx5oWwAAAAw"] [Sat Feb 21 18:20:32.224483 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /helmetjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Helmetjs/.env"] [unique_id "aZmxIDgyub9jMIOPIArxygAAAAc"] [Sat Feb 21 18:20:33.464268 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/hgs-static/.env"] [unique_id "aZmxIUuKN3Bz1O6Cf-gIngAAAAA"] [Sat Feb 21 18:20:34.432405 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hgs-static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/hgs-static/.env"] [unique_id "aZmxIppe9KOFdAtIQx5oXQAAAAw"] [Sat Feb 21 18:20:35.671517 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/higlass-website/.env"] [unique_id "aZmxIx09CmUltJs1PthcjwAAAAE"] [Sat Feb 21 18:20:36.472346 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /higlass-website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/higlass-website/.env"] [unique_id "aZmxJHrZ_c8LouBrYfy7xAAAAAU"] [Sat Feb 21 18:20:37.326029 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:20:37.870032 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/home/.env"] [unique_id "aZmxJR09CmUltJs1PthckAAAAAE"] [Sat Feb 21 18:20:38.774354 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /home/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/home/.env"] [unique_id "aZmxJlAuKWjBndpBvNwZMAAAAAQ"] [Sat Feb 21 18:20:39.881789 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/horde/.env"] [unique_id "aZmxJ2xG-ZG_tIvrf97nMwAAAAM"] [Sat Feb 21 18:20:40.349923 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/domains.php [Sat Feb 21 18:20:40.678304 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /horde/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/horde/.env"] [unique_id "aZmxKDgyub9jMIOPIArx0AAAAAc"] [Sat Feb 21 18:20:40.997195 2026] [access_compat:error] [pid 2190981:tid 2190981] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/clss.php [Sat Feb 21 18:20:41.672271 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/autoload_classmap.php [Sat Feb 21 18:20:41.931802 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "aZmxKXrZ_c8LouBrYfy7yAAAAAU"] [Sat Feb 21 18:20:42.415298 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/byp.php [Sat Feb 21 18:20:42.974720 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /hotpot-app-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "aZmxKjgyub9jMIOPIArx0QAAAAc"] [Sat Feb 21 18:20:44.358255 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/htdocs/.env"] [unique_id "aZmxLHpA9eipntFQcueBvgAAABI"] [Sat Feb 21 18:20:45.234727 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /htdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/htdocs/.env"] [unique_id "aZmxLZpe9KOFdAtIQx5oZgAAAAw"] [Sat Feb 21 18:20:46.502244 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/html/.env"] [unique_id "aZmxLhD12ciBDK59nTzvjAAAAAI"] [Sat Feb 21 18:20:47.287878 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/html/.env"] [unique_id "aZmxL2xG-ZG_tIvrf97nOQAAAAM"] [Sat Feb 21 18:20:47.540692 2026] [security2:error] [pid 2190249:tid 2190249] [client 87.106.33.160:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-global": Permission denied [hostname "mastercomm.net.pk"] [uri "/postnews.php"] [unique_id "aZmxL3pA9eipntFQcueBwAAAABI"], referer: www.google.com [Sat Feb 21 18:20:47.540765 2026] [security2:error] [pid 2190249:tid 2190249] [client 87.106.33.160:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mastercommnet-ip": Permission denied [hostname "mastercomm.net.pk"] [uri "/postnews.php"] [unique_id "aZmxL3pA9eipntFQcueBwAAAABI"], referer: www.google.com [Sat Feb 21 18:20:48.581045 2026] [security2:error] [pid 2178036:tid 2178036] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/http/.env"] [unique_id "aZmxMB09CmUltJs1PthcmAAAAAE"] [Sat Feb 21 18:20:49.422974 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /http/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/http/.env"] [unique_id "aZmxMUuKN3Bz1O6Cf-gIqAAAAAA"] [Sat Feb 21 18:20:50.563517 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/httpboot/.env"] [unique_id "aZmxMnpA9eipntFQcueBwgAAABI"] [Sat Feb 21 18:20:51.386825 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpboot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/httpboot/.env"] [unique_id "aZmxM1MqSo7iS-0AaIsWfwAAABM"] [Sat Feb 21 18:20:52.600564 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/httpdocs/.env"] [unique_id "aZmxNJpe9KOFdAtIQx5oagAAAAw"] [Sat Feb 21 18:20:53.457440 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /httpdocs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/httpdocs/.env"] [unique_id "aZmxNWxG-ZG_tIvrf97nPAAAAAM"] [Sat Feb 21 18:20:54.655189 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/HUNIV_migration/.env"] [unique_id "aZmxNvPgItFgXMKgTSvliQAAAAk"] [Sat Feb 21 18:20:55.469362 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /huniv_migration/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/HUNIV_migration/.env"] [unique_id "aZmxN1AuKWjBndpBvNwZOwAAAAQ"] [Sat Feb 21 18:20:55.717088 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/zc-104.php [Sat Feb 21 18:20:58.839897 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmxOVAuKWjBndpBvNwZPAAAAAQ"] [Sat Feb 21 18:20:58.839979 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmxOVAuKWjBndpBvNwZPAAAAAQ"] [Sat Feb 21 18:20:58.936418 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/icon/.env"] [unique_id "aZmxOkuKN3Bz1O6Cf-gIrQAAAAA"] [Sat Feb 21 18:20:59.741402 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icon/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/icon/.env"] [unique_id "aZmxO_PgItFgXMKgTSvljAAAAAk"] [Sat Feb 21 18:21:01.139567 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/icons/.env"] [unique_id "aZmxPUuKN3Bz1O6Cf-gIrgAAAAA"] [Sat Feb 21 18:21:02.132852 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /icons/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/icons/.env"] [unique_id "aZmxPppe9KOFdAtIQx5ocAAAAAw"] [Sat Feb 21 18:21:03.626105 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ikiwiki/.env"] [unique_id "aZmxP0uKN3Bz1O6Cf-gIrwAAAAA"] [Sat Feb 21 18:21:04.298236 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxQB09CmUltJs1PthcngAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 18:21:04.298386 2026] [security2:error] [pid 2178036:tid 2178036] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxQB09CmUltJs1PthcngAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 18:21:04.545169 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ikiwiki/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ikiwiki/.env"] [unique_id "aZmxQPPgItFgXMKgTSvljgAAAAk"] [Sat Feb 21 18:21:05.802540 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/image_data/.env"] [unique_id "aZmxQUuKN3Bz1O6Cf-gIsAAAAAA"] [Sat Feb 21 18:21:06.597902 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /image_data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/image_data/.env"] [unique_id "aZmxQppe9KOFdAtIQx5ocgAAAAw"] [Sat Feb 21 18:21:07.970059 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Imagebord/.env"] [unique_id "aZmxQxD12ciBDK59nTzvmAAAAAI"] [Sat Feb 21 18:21:08.799615 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /imagebord/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Imagebord/.env"] [unique_id "aZmxRHrZ_c8LouBrYfy72QAAAAU"] [Sat Feb 21 18:21:09.066487 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/6kDPjgFTmvS.php [Sat Feb 21 18:21:09.756044 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/vanda.php [Sat Feb 21 18:21:10.078283 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/images/.env"] [unique_id "aZmxRlAuKWjBndpBvNwZQwAAAAQ"] [Sat Feb 21 18:21:10.888557 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /images/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/images/.env"] [unique_id "aZmxRnrZ_c8LouBrYfy72gAAAAU"] [Sat Feb 21 18:21:12.112981 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/img/.env"] [unique_id "aZmxSFMqSo7iS-0AaIsWjAAAABM"] [Sat Feb 21 18:21:12.157616 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxSFAuKWjBndpBvNwZRAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 18:21:12.157708 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxSFAuKWjBndpBvNwZRAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6 [Sat Feb 21 18:21:12.893121 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:21:12.947511 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /img/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/img/.env"] [unique_id "aZmxSHpA9eipntFQcueBzwAAABI"] [Sat Feb 21 18:21:18.454367 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/includes/.env"] [unique_id "aZmxTjgyub9jMIOPIArx5QAAAAc"] [Sat Feb 21 18:21:19.255714 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/includes/.env"] [unique_id "aZmxT3rZ_c8LouBrYfy73gAAAAU"] [Sat Feb 21 18:21:22.689182 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/install.php [Sat Feb 21 18:21:44.582378 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/install/.env"] [unique_id "aZmxaGxG-ZG_tIvrf97nXQAAAAM"] [Sat Feb 21 18:21:45.408056 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /install/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/install/.env"] [unique_id "aZmxaXrZ_c8LouBrYfy77QAAAAU"] [Sat Feb 21 18:21:46.638160 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/InstantCV/server/.env"] [unique_id "aZmxamxG-ZG_tIvrf97nXgAAAAM"] [Sat Feb 21 18:21:47.382392 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxa_PgItFgXMKgTSvlqgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:21:47.382450 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxa_PgItFgXMKgTSvlqgAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:21:47.494840 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /instantcv/server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/InstantCV/server/.env"] [unique_id "aZmxa1MqSo7iS-0AaIsWoQAAABM"] [Sat Feb 21 18:21:48.192716 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:21:53.112523 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxcfPgItFgXMKgTSvlsQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 18:21:53.112605 2026] [security2:error] [pid 2173288:tid 2173288] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxcfPgItFgXMKgTSvlsQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A2%2Fsubsystem [Sat Feb 21 18:21:54.662384 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxcnrZ_c8LouBrYfy7-gAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:21:54.662495 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxcnrZ_c8LouBrYfy7-gAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:21:57.193039 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/items/.env"] [unique_id "aZmxdZpe9KOFdAtIQx5olQAAAAw"] [Sat Feb 21 18:21:57.939683 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /items/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/items/.env"] [unique_id "aZmxdTgyub9jMIOPIAryAQAAAAc"] [Sat Feb 21 18:21:59.185131 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/javascript/.env"] [unique_id "aZmxd3rZ_c8LouBrYfy7_QAAAAU"] [Sat Feb 21 18:22:00.093141 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /javascript/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/javascript/.env"] [unique_id "aZmxeLhH1gqZ3dYvDyhVQgAAAAE"] [Sat Feb 21 18:22:01.023891 2026] [access_compat:error] [pid 2187398:tid 2187398] [client 20.100.191.215:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sm.php [Sat Feb 21 18:22:01.146756 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 20.100.191.215:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/sc.php [Sat Feb 21 18:22:01.411783 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jenkins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/jenkins/.env"] [unique_id "aZmxefPgItFgXMKgTSvltwAAAAk"] [Sat Feb 21 18:22:02.513314 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jenkins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/jenkins/.env"] [unique_id "aZmxekuKN3Bz1O6Cf-gI0QAAAAA"] [Sat Feb 21 18:22:05.250794 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxfXpA9eipntFQcueB9wAAABI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:22:05.250896 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxfXpA9eipntFQcueB9wAAABI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:22:06.136256 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/joomla/.env"] [unique_id "aZmxfppe9KOFdAtIQx5omwAAAAw"] [Sat Feb 21 18:22:06.934171 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /joomla/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/joomla/.env"] [unique_id "aZmxflAuKWjBndpBvNwZZgAAAAQ"] [Sat Feb 21 18:22:08.034599 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js-plugin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/js-plugin/.env"] [unique_id "aZmxgPPgItFgXMKgTSvlugAAAAk"] [Sat Feb 21 18:22:08.962069 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /js-plugin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/js-plugin/.env"] [unique_id "aZmxgHpA9eipntFQcueB-QAAABI"] [Sat Feb 21 18:22:12.481686 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/gdn.php [Sat Feb 21 18:22:13.173763 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/cache.php [Sat Feb 21 18:22:24.977839 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jsrelay/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/jsrelay/.env"] [unique_id "aZmxkFAuKWjBndpBvNwZcQAAAAQ"] [Sat Feb 21 18:22:25.776176 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jsrelay/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/jsrelay/.env"] [unique_id "aZmxkUuKN3Bz1O6Cf-gI4QAAAAA"] [Sat Feb 21 18:22:25.998934 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/asd.php [Sat Feb 21 18:22:26.676667 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/favicon.php [Sat Feb 21 18:22:26.923339 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jupyter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/jupyter/.env"] [unique_id "aZmxkvPgItFgXMKgTSvlxQAAAAk"] [Sat Feb 21 18:22:27.339962 2026] [access_compat:error] [pid 2195998:tid 2195998] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/file.php [Sat Feb 21 18:22:27.736059 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /jupyter/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/jupyter/.env"] [unique_id "aZmxk2xG-ZG_tIvrf97newAAAAM"] [Sat Feb 21 18:22:28.025839 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/rzki.php [Sat Feb 21 18:22:28.706826 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/buy.php [Sat Feb 21 18:22:28.826099 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /khanlinks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/khanlinks/.env"] [unique_id "aZmxlHpA9eipntFQcueCBgAAABI"] [Sat Feb 21 18:22:29.503076 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/install.php [Sat Feb 21 18:22:29.758618 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /khanlinks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/khanlinks/.env"] [unique_id "aZmxlTgyub9jMIOPIAryFQAAAAc"] [Sat Feb 21 18:22:30.220267 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/inputs.php [Sat Feb 21 18:22:30.984364 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kibana/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/kibana/.env"] [unique_id "aZmxlvPgItFgXMKgTSvlyQAAAAk"] [Sat Feb 21 18:22:31.852737 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kibana/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/kibana/.env"] [unique_id "aZmxl0uKN3Bz1O6Cf-gI5QAAAAA"] [Sat Feb 21 18:22:33.086634 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kodenames-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/kodenames-server/.env"] [unique_id "aZmxmTgyub9jMIOPIAryFwAAAAc"] [Sat Feb 21 18:22:33.865480 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kodenames-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/kodenames-server/.env"] [unique_id "aZmxmZpe9KOFdAtIQx5orQAAAAw"] [Sat Feb 21 18:22:35.209030 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kolab-syncroton/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/kolab-syncroton/.env"] [unique_id "aZmxm3pA9eipntFQcueCCwAAABI"] [Sat Feb 21 18:22:35.538399 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxm3rZ_c8LouBrYfy8DgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:22:35.538486 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxm3rZ_c8LouBrYfy8DgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:22:36.073502 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kolab-syncroton/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/kolab-syncroton/.env"] [unique_id "aZmxnDgyub9jMIOPIAryGQAAAAc"] [Sat Feb 21 18:22:37.208114 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Kubernetes/.env"] [unique_id "aZmxnRD12ciBDK59nTzv2AAAAAI"] [Sat Feb 21 18:22:38.033925 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Kubernetes/.env"] [unique_id "aZmxnlAuKWjBndpBvNwZfAAAAAQ"] [Sat Feb 21 18:22:39.248221 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/kubernetes/.env"] [unique_id "aZmxn2xG-ZG_tIvrf97nggAAAAM"] [Sat Feb 21 18:22:40.088624 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /kubernetes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/kubernetes/.env"] [unique_id "aZmxoPPgItFgXMKgTSvlzgAAAAk"] [Sat Feb 21 18:22:43.419328 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/lab/.env"] [unique_id "aZmxo3rZ_c8LouBrYfy8EwAAAAU"] [Sat Feb 21 18:22:44.338079 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lab/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/lab/.env"] [unique_id "aZmxpDgyub9jMIOPIAryHgAAAAc"] [Sat Feb 21 18:22:45.737758 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/lambda/.env"] [unique_id "aZmxpWxG-ZG_tIvrf97nhwAAAAM"] [Sat Feb 21 18:22:46.584925 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lambda/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/lambda/.env"] [unique_id "aZmxpjgyub9jMIOPIAryHwAAAAc"] [Sat Feb 21 18:22:47.737311 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /latest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/latest/.env"] [unique_id "aZmxp7hH1gqZ3dYvDyhVZAAAAAE"] [Sat Feb 21 18:22:48.664137 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /latest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/latest/.env"] [unique_id "aZmxqJpe9KOFdAtIQx5otwAAAAw"] [Sat Feb 21 18:22:49.985741 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /layout/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/layout/.env"] [unique_id "aZmxqTgyub9jMIOPIAryIQAAAAc"] [Sat Feb 21 18:22:50.919500 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /layout/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/layout/.env"] [unique_id "aZmxqmxG-ZG_tIvrf97nigAAAAM"] [Sat Feb 21 18:22:52.275375 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/lcomernbootcamp/projbackend/.env"] [unique_id "aZmxrPPgItFgXMKgTSvl2AAAAAk"] [Sat Feb 21 18:22:53.191431 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lcomernbootcamp/projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/lcomernbootcamp/projbackend/.env"] [unique_id "aZmxrUuKN3Bz1O6Cf-gI9AAAAAA"] [Sat Feb 21 18:22:54.350562 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /leafer-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/leafer-app/.env"] [unique_id "aZmxrlMqSo7iS-0AaIsWzwAAABM"] [Sat Feb 21 18:22:55.126849 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /leafer-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/leafer-app/.env"] [unique_id "aZmxr0uKN3Bz1O6Cf-gI9QAAAAA"] [Sat Feb 21 18:22:55.478006 2026] [access_compat:error] [pid 2190981:tid 2190981] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/ws.php [Sat Feb 21 18:22:56.165397 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/44.php [Sat Feb 21 18:22:56.478669 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ledger_sync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ledger_sync/.env"] [unique_id "aZmxsFMqSo7iS-0AaIsW0QAAABM"] [Sat Feb 21 18:22:57.347408 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ledger_sync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ledger_sync/.env"] [unique_id "aZmxsVAuKWjBndpBvNwZjAAAAAQ"] [Sat Feb 21 18:23:04.219261 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /legal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/legal/.env"] [unique_id "aZmxuHpA9eipntFQcueCIQAAABI"] [Sat Feb 21 18:23:05.378666 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /legal/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/legal/.env"] [unique_id "aZmxuXrZ_c8LouBrYfy8JQAAAAU"] [Sat Feb 21 18:23:07.024964 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/lemonldap-ng-doc/.env"] [unique_id "aZmxuxD12ciBDK59nTzv8QAAAAI"] [Sat Feb 21 18:23:08.066571 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/lemonldap-ng-doc/.env"] [unique_id "aZmxvPPgItFgXMKgTSvl6AAAAAk"] [Sat Feb 21 18:23:09.211008 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/404.php [Sat Feb 21 18:23:09.353480 2026] [security2:error] [pid 2190227:tid 2190227] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.testthree.onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmxvWxG-ZG_tIvrf97nmwAAAAM"] [Sat Feb 21 18:23:09.353589 2026] [security2:error] [pid 2190227:tid 2190227] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.testthree.onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmxvWxG-ZG_tIvrf97nmwAAAAM"] [Sat Feb 21 18:23:09.710419 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-fr-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "aZmxvXpA9eipntFQcueCJgAAABI"] [Sat Feb 21 18:23:10.874497 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lemonldap-ng-fr-doc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "aZmxvjgyub9jMIOPIAryOAAAAAc"] [Sat Feb 21 18:23:12.312327 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /letsencrypt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/letsencrypt/.env"] [unique_id "aZmxwBD12ciBDK59nTzv9wAAAAI"] [Sat Feb 21 18:23:13.113533 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /letsencrypt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/letsencrypt/.env"] [unique_id "aZmxwXpA9eipntFQcueCKQAAABI"] [Sat Feb 21 18:23:14.438726 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/lib/.env"] [unique_id "aZmxwjgyub9jMIOPIAryOwAAAAc"] [Sat Feb 21 18:23:15.095263 2026] [access_compat:error] [pid 2190764:tid 2190764] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:23:15.279918 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/lib/.env"] [unique_id "aZmxw3pA9eipntFQcueCKgAAABI"] [Sat Feb 21 18:23:18.902649 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libraries/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/libraries/.env"] [unique_id "aZmxxkuKN3Bz1O6Cf-gJCAAAAAA"] [Sat Feb 21 18:23:19.356340 2026] [security2:error] [pid 2195998:tid 2195998] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxx7hH1gqZ3dYvDyhVfQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:23:19.356463 2026] [security2:error] [pid 2195998:tid 2195998] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmxx7hH1gqZ3dYvDyhVfQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:23:19.825339 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libraries/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/libraries/.env"] [unique_id "aZmxx2xG-ZG_tIvrf97npgAAAAM"] [Sat Feb 21 18:23:21.250448 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Library/.env"] [unique_id "aZmxyXrZ_c8LouBrYfy8MgAAAAU"] [Sat Feb 21 18:23:22.237952 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Library/.env"] [unique_id "aZmxylAuKWjBndpBvNwZngAAAAQ"] [Sat Feb 21 18:23:23.586057 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/libs/.env"] [unique_id "aZmxy2xG-ZG_tIvrf97nqAAAAAM"] [Sat Feb 21 18:23:24.535192 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /libs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/libs/.env"] [unique_id "aZmxzPPgItFgXMKgTSvl9QAAAAk"] [Sat Feb 21 18:23:30.018031 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /linux/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/linux/.env"] [unique_id "aZmx0lMqSo7iS-0AaIsW5AAAABM"] [Sat Feb 21 18:23:30.844226 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /linux/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/linux/.env"] [unique_id "aZmx0npA9eipntFQcueCMwAAABI"] [Sat Feb 21 18:23:34.382123 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /localhost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/localhost/.env"] [unique_id "aZmx1kuKN3Bz1O6Cf-gJEgAAAAA"] [Sat Feb 21 18:23:35.225591 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /localhost/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/localhost/.env"] [unique_id "aZmx11MqSo7iS-0AaIsW5wAAABM"] [Sat Feb 21 18:23:36.488528 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /locally/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/locally/.env"] [unique_id "aZmx2EuKN3Bz1O6Cf-gJEwAAAAA"] [Sat Feb 21 18:23:37.423782 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /locally/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/locally/.env"] [unique_id "aZmx2VAuKWjBndpBvNwZqAAAAAQ"] [Sat Feb 21 18:23:40.884995 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /log/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/log/.env"] [unique_id "aZmx3FMqSo7iS-0AaIsW6gAAABM"] [Sat Feb 21 18:23:41.773084 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /log/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/log/.env"] [unique_id "aZmx3XpA9eipntFQcueCOgAAABI"] [Sat Feb 21 18:23:43.022540 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/log/development.log"] [unique_id "aZmx31MqSo7iS-0AaIsW6wAAABM"] [Sat Feb 21 18:23:43.920995 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/log/development.log"] [unique_id "aZmx37hH1gqZ3dYvDyhViwAAAAE"] [Sat Feb 21 18:23:45.226884 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/logging/.env"] [unique_id "aZmx4VMqSo7iS-0AaIsW7AAAABM"] [Sat Feb 21 18:23:46.126185 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logging/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/logging/.env"] [unique_id "aZmx4kuKN3Bz1O6Cf-gJGQAAAAA"] [Sat Feb 21 18:23:50.175235 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/login/.env"] [unique_id "aZmx5kuKN3Bz1O6Cf-gJGwAAAAA"] [Sat Feb 21 18:23:51.063678 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/login/.env"] [unique_id "aZmx51MqSo7iS-0AaIsW7wAAABM"] [Sat Feb 21 18:23:54.578188 2026] [security2:error] [pid 2173288:tid 2173288] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/logs/.env"] [unique_id "aZmx6vPgItFgXMKgTSvmBgAAAAk"] [Sat Feb 21 18:23:55.403906 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /logs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/logs/.env"] [unique_id "aZmx65pe9KOFdAtIQx5o6QAAAAw"] [Sat Feb 21 18:23:56.586336 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/logs/access.log"] [unique_id "aZmx7HpA9eipntFQcueCQQAAABI"] [Sat Feb 21 18:23:57.541626 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/logs/access.log"] [unique_id "aZmx7XrZ_c8LouBrYfy8SAAAAAU"] [Sat Feb 21 18:23:58.740662 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/logs/app.log"] [unique_id "aZmx7lAuKWjBndpBvNwZtQAAAAQ"] [Sat Feb 21 18:23:59.617946 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/logs/app.log"] [unique_id "aZmx75pe9KOFdAtIQx5o6wAAAAw"] [Sat Feb 21 18:24:01.052314 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/logs/error.log"] [unique_id "aZmx8VAuKWjBndpBvNwZtgAAAAQ"] [Sat Feb 21 18:24:01.064279 2026] [access_compat:error] [pid 2173288:tid 2173288] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/wp-config-sample.php [Sat Feb 21 18:24:01.771742 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/rip.php [Sat Feb 21 18:24:02.108997 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/logs/error.log"] [unique_id "aZmx8mxG-ZG_tIvrf97nwAAAAAM"] [Sat Feb 21 18:24:03.542890 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/magento/.env"] [unique_id "aZmx80uKN3Bz1O6Cf-gJIwAAAAA"] [Sat Feb 21 18:24:04.557332 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /magento/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/magento/.env"] [unique_id "aZmx9FAuKWjBndpBvNwZuAAAAAQ"] [Sat Feb 21 18:24:05.973759 2026] [security2:error] [pid 2190764:tid 2190764] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailinabox/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mailinabox/.env"] [unique_id "aZmx9RD12ciBDK59nTzwFQAAAAI"] [Sat Feb 21 18:24:06.975367 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailinabox/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/mailinabox/.env"] [unique_id "aZmx9lMqSo7iS-0AaIsW9wAAABM"] [Sat Feb 21 18:24:08.291280 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mailman/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mailman/.env"] [unique_id "aZmx-GxG-ZG_tIvrf97nwwAAAAM"] [Sat Feb 21 18:24:08.291594 2026] [cgi:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] AH02811: stderr from /usr/local/cpanel/3rdparty/mailman/cgi-bin/.env: script not found or unable to stat [Sat Feb 21 18:24:08.291663 2026] [core:crit] [pid 2190227:tid 2190227] (13)Permission denied: [client 185.177.72.23:0] AH00529: /home/bwtand/public_html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/bwtand/public_html/' is executable [Sat Feb 21 18:24:08.781619 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmx-HrZ_c8LouBrYfy8TwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:24:08.781711 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmx-HrZ_c8LouBrYfy8TwAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:24:21.441608 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:24:21.561966 2026] [access_compat:error] [pid 2197166:tid 2197166] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:24:24.122665 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:24:41.141504 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:24:42.015145 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/main_user/.env"] [unique_id "aZmyGnpA9eipntFQcueCWwAAABI"] [Sat Feb 21 18:24:42.908690 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /main_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/main_user/.env"] [unique_id "aZmyGppe9KOFdAtIQx5o_AAAAAw"] [Sat Feb 21 18:24:45.847251 2026] [security2:error] [pid 2190249:tid 2190249] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmyHHpA9eipntFQcueCXAAAABI"] [Sat Feb 21 18:24:45.847375 2026] [security2:error] [pid 2190249:tid 2190249] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmyHHpA9eipntFQcueCXAAAABI"] [Sat Feb 21 18:24:48.780638 2026] [security2:error] [pid 2197178:tid 2197178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /manual/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/manual/.env"] [unique_id "aZmyIB9X1JJEtXyj7iyWAQAAAAo"] [Sat Feb 21 18:24:49.648342 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /manual/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/manual/.env"] [unique_id "aZmyIVAuKWjBndpBvNwZzQAAAAQ"] [Sat Feb 21 18:24:50.936509 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /master/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/master/.env"] [unique_id "aZmyIppe9KOFdAtIQx5pAAAAAAw"] [Sat Feb 21 18:24:51.840193 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /master/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/master/.env"] [unique_id "aZmyI3pA9eipntFQcueCYAAAABI"] [Sat Feb 21 18:24:52.198187 2026] [access_compat:error] [pid 2197166:tid 2197166] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/404.php [Sat Feb 21 18:24:52.909489 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/wp-blog.php [Sat Feb 21 18:24:53.310945 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/media/.env"] [unique_id "aZmyJUgES1r21G00S1zRZgAAAAY"] [Sat Feb 21 18:24:53.652780 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/info.php [Sat Feb 21 18:24:54.284601 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /media/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/media/.env"] [unique_id "aZmyJlAuKWjBndpBvNwZ0AAAAAQ"] [Sat Feb 21 18:24:55.555676 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /memcached/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/memcached/.env"] [unique_id "aZmyJzgyub9jMIOPIArydQAAAAc"] [Sat Feb 21 18:24:56.419201 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /memcached/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/memcached/.env"] [unique_id "aZmyKEgES1r21G00S1zRaAAAAAY"] [Sat Feb 21 18:24:57.674630 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mentorg-lava-docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mentorg-lava-docker/.env"] [unique_id "aZmyKTgyub9jMIOPIArydgAAAAc"] [Sat Feb 21 18:24:58.670634 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mentorg-lava-docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/mentorg-lava-docker/.env"] [unique_id "aZmyKnpA9eipntFQcueCZQAAABI"] [Sat Feb 21 18:25:00.024561 2026] [security2:error] [pid 2197177:tid 2197177] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyK9Oijfkh7MgiTAtiPQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:25:00.024672 2026] [security2:error] [pid 2197177:tid 2197177] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyK9Oijfkh7MgiTAtiPQAAAAg"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:25:00.062725 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react-communication/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/micro-app-react-communication/.env"] [unique_id "aZmyLEuKN3Bz1O6Cf-gJRAAAAAA"] [Sat Feb 21 18:25:01.451456 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react-communication/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/micro-app-react-communication/.env"] [unique_id "aZmyLXpA9eipntFQcueCZgAAABI"] [Sat Feb 21 18:25:03.338065 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/micro-app-react/.env"] [unique_id "aZmyL5pe9KOFdAtIQx5pCAAAAAw"] [Sat Feb 21 18:25:04.617240 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /micro-app-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/micro-app-react/.env"] [unique_id "aZmyMNOijfkh7MgiTAtiQAAAAAg"] [Sat Feb 21 18:25:06.236740 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mindsweeper/gui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mindsweeper/gui/.env"] [unique_id "aZmyMjgyub9jMIOPIAryewAAAAc"] [Sat Feb 21 18:25:06.867275 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/rip.php [Sat Feb 21 18:25:07.316674 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mindsweeper/gui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/mindsweeper/gui/.env"] [unique_id "aZmyM3rZ_c8LouBrYfy8cwAAAAU"] [Sat Feb 21 18:25:07.636617 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/h.php [Sat Feb 21 18:25:08.425592 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/56c53.php [Sat Feb 21 18:25:09.400163 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /minified/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/minified/.env"] [unique_id "aZmyNWxG-ZG_tIvrf97n4wAAAAM"] [Sat Feb 21 18:25:09.570540 2026] [security2:error] [pid 2190250:tid 2190250] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/index.php"] [unique_id "aZmyNFMqSo7iS-0AaIsXGwAAABM"], referer: http://taartisan.com/contents/wp-json/wp/v2/types/post?context=edit [Sat Feb 21 18:25:09.570650 2026] [security2:error] [pid 2190250:tid 2190250] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/index.php"] [unique_id "aZmyNFMqSo7iS-0AaIsXGwAAABM"], referer: http://taartisan.com/contents/wp-json/wp/v2/types/post?context=edit [Sat Feb 21 18:25:10.555170 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /minified/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/minified/.env"] [unique_id "aZmyNtOijfkh7MgiTAtiRAAAAAg"] [Sat Feb 21 18:25:12.146986 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /misc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/misc/.env"] [unique_id "aZmyODgyub9jMIOPIAryfgAAAAc"] [Sat Feb 21 18:25:13.191667 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /misc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/misc/.env"] [unique_id "aZmyObhH1gqZ3dYvDyhVvgAAAAE"] [Sat Feb 21 18:25:15.010967 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Modix/ClientApp/.env"] [unique_id "aZmyO3pA9eipntFQcueCbAAAABI"] [Sat Feb 21 18:25:15.893434 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /modix/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Modix/ClientApp/.env"] [unique_id "aZmyO1MqSo7iS-0AaIsXIQAAABM"] [Sat Feb 21 18:25:17.254362 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monerod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/monerod/.env"] [unique_id "aZmyPXpA9eipntFQcueCbQAAABI"] [Sat Feb 21 18:25:18.251166 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monerod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/monerod/.env"] [unique_id "aZmyPmxG-ZG_tIvrf97n6QAAAAM"] [Sat Feb 21 18:25:19.685835 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mongodb/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/mongodb/config/dev/.env"] [unique_id "aZmyP5pe9KOFdAtIQx5pDAAAAAw"] [Sat Feb 21 18:25:20.647102 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /mongodb/config/dev/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/mongodb/config/dev/.env"] [unique_id "aZmyQFAuKWjBndpBvNwZ4AAAAAQ"] [Sat Feb 21 18:25:22.109406 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monitoring/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/monitoring/compose/.env"] [unique_id "aZmyQnpA9eipntFQcueCbwAAABI"] [Sat Feb 21 18:25:22.668602 2026] [access_compat:error] [pid 2187398:tid 2187398] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/i.php [Sat Feb 21 18:25:23.000202 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /monitoring/compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/monitoring/compose/.env"] [unique_id "aZmyQlMqSo7iS-0AaIsXJQAAABM"] [Sat Feb 21 18:25:23.389153 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/xsas.php [Sat Feb 21 18:25:24.221496 2026] [access_compat:error] [pid 2197177:tid 2197177] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/varb.php [Sat Feb 21 18:25:24.706764 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /moodledata/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/moodledata/.env"] [unique_id "aZmyRHrZ_c8LouBrYfy8fgAAAAU"] [Sat Feb 21 18:25:25.713998 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /moodledata/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/moodledata/.env"] [unique_id "aZmyRbhH1gqZ3dYvDyhVxAAAAAE"] [Sat Feb 21 18:25:27.107185 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /msks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/msks/.env"] [unique_id "aZmyR2xG-ZG_tIvrf97n7QAAAAM"] [Sat Feb 21 18:25:28.064192 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /msks/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/msks/.env"] [unique_id "aZmySLhH1gqZ3dYvDyhVxQAAAAE"] [Sat Feb 21 18:25:29.626360 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /munki_repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/munki_repo/.env"] [unique_id "aZmySUgES1r21G00S1zRfwAAAAY"] [Sat Feb 21 18:25:30.618699 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /munki_repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/munki_repo/.env"] [unique_id "aZmySrhH1gqZ3dYvDyhVxgAAAAE"] [Sat Feb 21 18:25:32.093496 2026] [security2:error] [pid 2197178:tid 2197178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /music/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/music/.env"] [unique_id "aZmyTB9X1JJEtXyj7iyWGAAAAAo"] [Sat Feb 21 18:25:33.072643 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /music/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/music/.env"] [unique_id "aZmyTbhH1gqZ3dYvDyhVxwAAAAE"] [Sat Feb 21 18:25:34.605580 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "aZmyTtOijfkh7MgiTAtiVAAAAAg"] [Sat Feb 21 18:25:35.848341 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /myrentals.web/clientapp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "aZmyT7hH1gqZ3dYvDyhVyAAAAAE"] [Sat Feb 21 18:25:38.158709 2026] [access_compat:error] [pid 2195998:tid 2195998] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/xxzdc.php [Sat Feb 21 18:25:38.907876 2026] [access_compat:error] [pid 2190981:tid 2190981] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/gdn.php [Sat Feb 21 18:25:39.676854 2026] [access_compat:error] [pid 2197166:tid 2197166] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/elp.php [Sat Feb 21 18:25:39.679266 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /name/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/name/.env"] [unique_id "aZmyU5pe9KOFdAtIQx5pFQAAAAw"] [Sat Feb 21 18:25:40.458731 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/144.php [Sat Feb 21 18:25:40.834878 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /name/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/name/.env"] [unique_id "aZmyVNOijfkh7MgiTAtiWQAAAAg"] [Sat Feb 21 18:25:42.326366 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/nest/.env"] [unique_id "aZmyVrhH1gqZ3dYvDyhVzAAAAAE"] [Sat Feb 21 18:25:43.213273 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/nest/.env"] [unique_id "aZmyV0gES1r21G00S1zRiQAAAAY"] [Sat Feb 21 18:25:46.911864 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new-js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/new-js/.env"] [unique_id "aZmyWjgyub9jMIOPIArylgAAAAc"] [Sat Feb 21 18:25:47.863795 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /new-js/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/new-js/.env"] [unique_id "aZmyW1AuKWjBndpBvNwZ8AAAAAQ"] [Sat Feb 21 18:25:49.490263 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:25:51.717555 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /news-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/news-app/.env"] [unique_id "aZmyXzgyub9jMIOPIArymQAAAAc"] [Sat Feb 21 18:25:52.636671 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /news-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/news-app/.env"] [unique_id "aZmyYEuKN3Bz1O6Cf-gJagAAAAA"] [Sat Feb 21 18:25:53.944023 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/next/.env"] [unique_id "aZmyYVAuKWjBndpBvNwZ9AAAAAQ"] [Sat Feb 21 18:25:54.447984 2026] [access_compat:error] [pid 2197166:tid 2197166] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/wp-conf.php [Sat Feb 21 18:25:54.704708 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyYkuKN3Bz1O6Cf-gJawAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:25:54.704804 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyYkuKN3Bz1O6Cf-gJawAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:25:54.976232 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /next/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/next/.env"] [unique_id "aZmyYnrZ_c8LouBrYfy8kAAAAAU"] [Sat Feb 21 18:25:56.374472 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/nginx-server/.env"] [unique_id "aZmyZFMqSo7iS-0AaIsXNAAAABM"] [Sat Feb 21 18:25:57.313967 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nginx-server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/nginx-server/.env"] [unique_id "aZmyZXrZ_c8LouBrYfy8kQAAAAU"] [Sat Feb 21 18:25:58.709311 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /niffler-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/niffler-frontend/.env"] [unique_id "aZmyZlAuKWjBndpBvNwZ-AAAAAQ"] [Sat Feb 21 18:25:59.655084 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /niffler-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/niffler-frontend/.env"] [unique_id "aZmyZ7hH1gqZ3dYvDyhV2AAAAAE"] [Sat Feb 21 18:26:01.327918 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/node_modules/.env"] [unique_id "aZmyaVAuKWjBndpBvNwZ-wAAAAQ"] [Sat Feb 21 18:26:02.700875 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /node_modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/node_modules/.env"] [unique_id "aZmyappe9KOFdAtIQx5pIgAAAAw"] [Sat Feb 21 18:26:03.107407 2026] [security2:error] [pid 2190227:tid 2190227] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyamxG-ZG_tIvrf97oCAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:26:03.107481 2026] [security2:error] [pid 2190227:tid 2190227] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyamxG-ZG_tIvrf97oCAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:26:04.439840 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "aZmybGxG-ZG_tIvrf97oCwAAAAM"] [Sat Feb 21 18:26:06.166875 2026] [security2:error] [pid 2197178:tid 2197178] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "aZmybh9X1JJEtXyj7iyWLAAAAAo"] [Sat Feb 21 18:26:07.722809 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "aZmyb3rZ_c8LouBrYfy8mQAAAAU"] [Sat Feb 21 18:26:08.217932 2026] [security2:error] [pid 2190250:tid 2190250] [client 122.179.158.34:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mastercomm.net.pk"] [uri "/app/.env"] [unique_id "aZmycFMqSo7iS-0AaIsXQAAAABM"] [Sat Feb 21 18:26:08.247594 2026] [security2:error] [pid 2197166:tid 2197166] [client 122.179.158.34:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mastercomm.net.pk"] [uri "/.env"] [unique_id "aZmycEgES1r21G00S1zRowAAAAY"] [Sat Feb 21 18:26:08.680487 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nodejs-projects/play-ground/manageuserroles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "aZmycEuKN3Bz1O6Cf-gJewAAAAA"] [Sat Feb 21 18:26:08.848592 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/lm15.php [Sat Feb 21 18:26:09.147899 2026] [security2:error] [pid 2197178:tid 2197178] [client 122.179.158.34:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mastercomm.net.pk"] [uri "/app/.env"] [unique_id "aZmycR9X1JJEtXyj7iyWLgAAAAo"] [Sat Feb 21 18:26:09.187633 2026] [security2:error] [pid 2118467:tid 2118467] [client 122.179.158.34:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mastercomm.net.pk"] [uri "/.env"] [unique_id "aZmycVAuKWjBndpBvNwaAgAAAAQ"] [Sat Feb 21 18:26:09.619233 2026] [access_compat:error] [pid 2197177:tid 2197177] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/inputs.php [Sat Feb 21 18:26:10.253172 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /novnc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/noVNC/.env"] [unique_id "aZmycppe9KOFdAtIQx5pJgAAAAw"] [Sat Feb 21 18:26:11.311090 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /novnc/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/noVNC/.env"] [unique_id "aZmyc2xG-ZG_tIvrf97oEAAAAAM"] [Sat Feb 21 18:26:15.229888 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "aZmyd1MqSo7iS-0AaIsXRgAAABM"] [Sat Feb 21 18:26:16.178149 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuke.app.ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "aZmyeFAuKWjBndpBvNwaBgAAAAQ"] [Sat Feb 21 18:26:17.685587 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/nuxt/.env"] [unique_id "aZmyebhH1gqZ3dYvDyhV6QAAAAE"] [Sat Feb 21 18:26:18.741843 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /nuxt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/nuxt/.env"] [unique_id "aZmyelAuKWjBndpBvNwaBwAAAAQ"] [Sat Feb 21 18:26:21.427629 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmyfNOijfkh7MgiTAtiegAAAAg"] [Sat Feb 21 18:26:21.427688 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmyfNOijfkh7MgiTAtiegAAAAg"] [Sat Feb 21 18:26:22.375936 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyflMqSo7iS-0AaIsXSgAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:26:22.376092 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyflMqSo7iS-0AaIsXSgAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:26:22.904105 2026] [security2:error] [pid 2197177:tid 2197177] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyftOijfkh7MgiTAtiewAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice [Sat Feb 21 18:26:22.904182 2026] [security2:error] [pid 2197177:tid 2197177] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyftOijfkh7MgiTAtiewAAAAg"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice [Sat Feb 21 18:26:29.842491 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/old/.env"] [unique_id "aZmyhUuKN3Bz1O6Cf-gJhgAAAAA"] [Sat Feb 21 18:26:30.908493 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /old/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/old/.env"] [unique_id "aZmyhppe9KOFdAtIQx5pMwAAAAw"] [Sat Feb 21 18:26:33.793451 2026] [security2:error] [pid 2191386:tid 2191386] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmyhzgyub9jMIOPIArytQAAAAc"] [Sat Feb 21 18:26:33.793553 2026] [security2:error] [pid 2191386:tid 2191386] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmyhzgyub9jMIOPIArytQAAAAc"] [Sat Feb 21 18:26:36.711857 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/d12.php [Sat Feb 21 18:26:37.425533 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /oldsanta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/oldsanta/.env"] [unique_id "aZmyjUuKN3Bz1O6Cf-gJigAAAAA"] [Sat Feb 21 18:26:37.472048 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/test.php [Sat Feb 21 18:26:37.575134 2026] [security2:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.testthree.onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmyjVMqSo7iS-0AaIsXUwAAABM"] [Sat Feb 21 18:26:37.575204 2026] [security2:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.testthree.onebox.pk"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmyjVMqSo7iS-0AaIsXUwAAABM"] [Sat Feb 21 18:26:38.177576 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/hehe.php [Sat Feb 21 18:26:38.271587 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /oldsanta/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/oldsanta/.env"] [unique_id "aZmyjkgES1r21G00S1zRtQAAAAY"] [Sat Feb 21 18:26:39.597332 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opencart/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/opencart/.env"] [unique_id "aZmyj2xG-ZG_tIvrf97oIAAAAAM"] [Sat Feb 21 18:26:40.654811 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /opencart/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/opencart/.env"] [unique_id "aZmykLhH1gqZ3dYvDyhV9wAAAAE"] [Sat Feb 21 18:26:42.120983 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ops/vagrant/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ops/vagrant/.env"] [unique_id "aZmykkuKN3Bz1O6Cf-gJjQAAAAA"] [Sat Feb 21 18:26:42.984954 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ops/vagrant/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ops/vagrant/.env"] [unique_id "aZmykrhH1gqZ3dYvDyhV-AAAAAE"] [Sat Feb 21 18:26:44.330936 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /option/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/option/.env"] [unique_id "aZmylHpA9eipntFQcueCrAAAABI"] [Sat Feb 21 18:26:45.310324 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /option/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/option/.env"] [unique_id "aZmylUuKN3Bz1O6Cf-gJjwAAAAA"] [Sat Feb 21 18:26:48.330931 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:26:50.885368 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /orientdb-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/orientdb-client/.env"] [unique_id "aZmymlMqSo7iS-0AaIsXWwAAABM"] [Sat Feb 21 18:26:51.969681 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/themes.php [Sat Feb 21 18:26:52.725025 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/bo.php [Sat Feb 21 18:26:53.460890 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/a5e0a.php [Sat Feb 21 18:26:53.934807 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /orientdb-client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/orientdb-client/.env"] [unique_id "aZmynVMqSo7iS-0AaIsXXQAAABM"] [Sat Feb 21 18:26:54.230607 2026] [access_compat:error] [pid 2190249:tid 2190249] [client 52.231.66.246:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/testthree.onebox.pk/z.php [Sat Feb 21 18:26:55.362562 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /outputs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/outputs/.env"] [unique_id "aZmyn3pA9eipntFQcueCsgAAABI"] [Sat Feb 21 18:26:56.306675 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /outputs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/outputs/.env"] [unique_id "aZmyoEgES1r21G00S1zRwAAAAAY"] [Sat Feb 21 18:26:57.668670 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /owncloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/owncloud/.env"] [unique_id "aZmyoVMqSo7iS-0AaIsXXwAAABM"] [Sat Feb 21 18:26:57.919677 2026] [security2:error] [pid 2172634:tid 2172634] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmyoJpe9KOFdAtIQx5pQgAAAAw"] [Sat Feb 21 18:26:57.919759 2026] [security2:error] [pid 2172634:tid 2172634] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmyoJpe9KOFdAtIQx5pQgAAAAw"] [Sat Feb 21 18:26:58.318442 2026] [proxy_fcgi:error] [pid 2197177:tid 2197177] [client 87.106.33.160:0] AH01071: Got error 'Primary script unknown', referer: www.google.com [Sat Feb 21 18:26:58.562720 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /owncloud/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/owncloud/.env"] [unique_id "aZmyokgES1r21G00S1zRwQAAAAY"] [Sat Feb 21 18:27:02.987043 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/styled-ui-docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/packages/styled-ui-docs/.env"] [unique_id "aZmypjgyub9jMIOPIAryyAAAAAc"] [Sat Feb 21 18:27:04.014410 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/styled-ui-docs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/packages/styled-ui-docs/.env"] [unique_id "aZmyqEgES1r21G00S1zRwwAAAAY"] [Sat Feb 21 18:27:05.657609 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/packages/web/.env"] [unique_id "aZmyqVMqSo7iS-0AaIsXZAAAABM"] [Sat Feb 21 18:27:07.023014 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packages/web/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/packages/web/.env"] [unique_id "aZmyq0gES1r21G00S1zRxAAAAAY"] [Sat Feb 21 18:27:08.587043 2026] [security2:error] [pid 2198901:tid 2198901] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packed/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/packed/.env"] [unique_id "aZmyrE7h4bbxf77KiNN0BwAAAAI"] [Sat Feb 21 18:27:09.549695 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /packed/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/packed/.env"] [unique_id "aZmyrUgES1r21G00S1zRxQAAAAY"] [Sat Feb 21 18:27:10.701846 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 87.106.33.160:0] AH01071: Got error 'Primary script unknown', referer: www.google.com [Sat Feb 21 18:27:11.105921 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /page-editor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/page-editor/.env"] [unique_id "aZmyrzgyub9jMIOPIAryzQAAAAc"] [Sat Feb 21 18:27:12.007397 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /page-editor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/page-editor/.env"] [unique_id "aZmysEgES1r21G00S1zRxgAAAAY"] [Sat Feb 21 18:27:13.377390 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/panel/.env"] [unique_id "aZmysVMqSo7iS-0AaIsXaAAAABM"] [Sat Feb 21 18:27:13.393172 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmysZpe9KOFdAtIQx5pTAAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:27:13.393361 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmysZpe9KOFdAtIQx5pTAAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:27:14.281028 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /panel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/panel/.env"] [unique_id "aZmysrhH1gqZ3dYvDyhWCQAAAAE"] [Sat Feb 21 18:27:15.556652 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /parity/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/parity/.env"] [unique_id "aZmyszgyub9jMIOPIAryzwAAAAc"] [Sat Feb 21 18:27:16.425482 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /parity/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/parity/.env"] [unique_id "aZmytHrZ_c8LouBrYfy8xQAAAAU"] [Sat Feb 21 18:27:17.765147 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Passportjs/.env"] [unique_id "aZmytZpe9KOFdAtIQx5pUAAAAAw"] [Sat Feb 21 18:27:18.738872 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /passportjs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Passportjs/.env"] [unique_id "aZmytnrZ_c8LouBrYfy8xgAAAAU"] [Sat Feb 21 18:27:20.209193 2026] [security2:error] [pid 2198901:tid 2198901] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /patchwork/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/patchwork/.env"] [unique_id "aZmyuE7h4bbxf77KiNN0DgAAAAI"] [Sat Feb 21 18:27:21.355681 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /patchwork/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/patchwork/.env"] [unique_id "aZmyuVAuKWjBndpBvNwaLQAAAAQ"] [Sat Feb 21 18:27:22.682633 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/path/.env"] [unique_id "aZmyulMqSo7iS-0AaIsXbAAAABM"] [Sat Feb 21 18:27:23.620165 2026] [security2:error] [pid 2198901:tid 2198901] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/path/.env"] [unique_id "aZmyu07h4bbxf77KiNN0EAAAAAI"] [Sat Feb 21 18:27:25.030314 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pfbe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/pfbe/.env"] [unique_id "aZmyvUuKN3Bz1O6Cf-gJpgAAAAA"] [Sat Feb 21 18:27:25.942825 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pfbe/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/pfbe/.env"] [unique_id "aZmyvVMqSo7iS-0AaIsXbgAAABM"] [Sat Feb 21 18:27:27.226745 2026] [authz_core:error] [pid 2198901:tid 2198901] [client 185.177.72.23:0] AH01630: client denied by server configuration: /home/bwtand/public_html/php.ini [Sat Feb 21 18:27:28.119734 2026] [authz_core:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] AH01630: client denied by server configuration: /home/bwtand/public_html/php.ini [Sat Feb 21 18:27:36.125666 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 87.106.33.160:0] AH01071: Got error 'Primary script unknown', referer: www.google.com [Sat Feb 21 18:27:36.260466 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyyDgyub9jMIOPIAry2gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:27:36.260551 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmyyDgyub9jMIOPIAry2gAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:28:11.712840 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmy65pe9KOFdAtIQx5pcwAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:28:11.712939 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmy65pe9KOFdAtIQx5pcwAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:28:24.415760 2026] [security2:error] [pid 2190981:tid 2190981] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/wp-access.php"] [unique_id "aZmy-HrZ_c8LouBrYfy87QAAAAU"] [Sat Feb 21 18:28:24.415832 2026] [security2:error] [pid 2190981:tid 2190981] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/wp-access.php"] [unique_id "aZmy-HrZ_c8LouBrYfy87QAAAAU"] [Sat Feb 21 18:28:31.919441 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pictures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/pictures/.env"] [unique_id "aZmy_3rZ_c8LouBrYfy88gAAAAU"] [Sat Feb 21 18:28:32.837158 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pictures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/pictures/.env"] [unique_id "aZmzAEgES1r21G00S1zR-QAAAAY"] [Sat Feb 21 18:28:34.112336 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/platform/.env"] [unique_id "aZmzAnrZ_c8LouBrYfy88wAAAAU"] [Sat Feb 21 18:28:34.756000 2026] [security2:error] [pid 2199724:tid 2199724] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzAsg8dzw2v7ML04PuyQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0 [Sat Feb 21 18:28:34.756097 2026] [security2:error] [pid 2199724:tid 2199724] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzAsg8dzw2v7ML04PuyQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0 [Sat Feb 21 18:28:35.051911 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /platform/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/platform/.env"] [unique_id "aZmzA1MqSo7iS-0AaIsXkwAAABM"] [Sat Feb 21 18:28:36.418272 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /playground/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/playground/.env"] [unique_id "aZmzBEgES1r21G00S1zR-wAAAAY"] [Sat Feb 21 18:28:37.346947 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /playground/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/playground/.env"] [unique_id "aZmzBXpA9eipntFQcueC8gAAABI"] [Sat Feb 21 18:28:38.690806 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugin_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/plugin_static/.env"] [unique_id "aZmzBtOijfkh7MgiTAtizQAAAAg"] [Sat Feb 21 18:28:39.602166 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugin_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/plugin_static/.env"] [unique_id "aZmzB3pA9eipntFQcueC8wAAABI"] [Sat Feb 21 18:28:41.038602 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/plugins/.env"] [unique_id "aZmzCVMqSo7iS-0AaIsXlwAAABM"] [Sat Feb 21 18:28:41.903613 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/plugins/.env"] [unique_id "aZmzCXrZ_c8LouBrYfy89wAAAAU"] [Sat Feb 21 18:28:43.114898 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /post-deployment/.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/post-deployment/.vscode/.env"] [unique_id "aZmzC5pe9KOFdAtIQx5phwAAAAw"] [Sat Feb 21 18:28:43.895790 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /post-deployment/.vscode/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/post-deployment/.vscode/.env"] [unique_id "aZmzC0uKN3Bz1O6Cf-gJ0wAAAAA"] [Sat Feb 21 18:28:45.409937 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postfixadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/postfixadmin/.env"] [unique_id "aZmzDdOijfkh7MgiTAti0QAAAAg"] [Sat Feb 21 18:28:46.308641 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /postfixadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/postfixadmin/.env"] [unique_id "aZmzDnpA9eipntFQcueC9gAAABI"] [Sat Feb 21 18:28:47.577496 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/prestashop/.env"] [unique_id "aZmzD0gES1r21G00S1zSAQAAAAY"] [Sat Feb 21 18:28:48.412476 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prestashop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/prestashop/.env"] [unique_id "aZmzEHrZ_c8LouBrYfy8-wAAAAU"] [Sat Feb 21 18:28:49.918916 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/preview-env/.env"] [unique_id "aZmzEZpe9KOFdAtIQx5piwAAAAw"] [Sat Feb 21 18:28:50.807541 2026] [security2:error] [pid 2195998:tid 2195998] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZmzEbhH1gqZ3dYvDyhWOQAAAAE"] [Sat Feb 21 18:28:50.807642 2026] [security2:error] [pid 2195998:tid 2195998] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZmzEbhH1gqZ3dYvDyhWOQAAAAE"] [Sat Feb 21 18:28:50.807988 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview-env/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/preview-env/.env"] [unique_id "aZmzEsg8dzw2v7ML04PuzwAAAAk"] [Sat Feb 21 18:28:52.155101 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/preview/.env"] [unique_id "aZmzFNOijfkh7MgiTAti1QAAAAg"] [Sat Feb 21 18:28:52.975864 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /preview/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/preview/.env"] [unique_id "aZmzFGxG-ZG_tIvrf97obAAAAAM"] [Sat Feb 21 18:28:53.481272 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:28:54.271470 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /price_hawk_client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/price_hawk_client/.env"] [unique_id "aZmzFlMqSo7iS-0AaIsXogAAABM"] [Sat Feb 21 18:28:55.174260 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /price_hawk_client/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/price_hawk_client/.env"] [unique_id "aZmzF9Oijfkh7MgiTAti2gAAAAg"] [Sat Feb 21 18:28:56.470623 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/prisma/.env"] [unique_id "aZmzGGxG-ZG_tIvrf97ocgAAAAM"] [Sat Feb 21 18:28:57.297485 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prisma/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/prisma/.env"] [unique_id "aZmzGUuKN3Bz1O6Cf-gJ4gAAAAA"] [Sat Feb 21 18:28:58.571827 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/private.key"] [unique_id "aZmzGmxG-ZG_tIvrf97odQAAAAM"] [Sat Feb 21 18:28:59.512441 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/private.key"] [unique_id "aZmzG5pe9KOFdAtIQx5plgAAAAw"] [Sat Feb 21 18:29:01.000282 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /processor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/processor/.env"] [unique_id "aZmzHDgyub9jMIOPIArzEQAAAAc"] [Sat Feb 21 18:29:01.985264 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /processor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/processor/.env"] [unique_id "aZmzHVAuKWjBndpBvNwaagAAAAQ"] [Sat Feb 21 18:29:02.592369 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:29:06.118544 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/prod/.env"] [unique_id "aZmzIlAuKWjBndpBvNwabAAAAAQ"] [Sat Feb 21 18:29:06.974538 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/prod/.env"] [unique_id "aZmzIkgES1r21G00S1zSEwAAAAY"] [Sat Feb 21 18:29:08.354691 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/product/.env.staging"] [unique_id "aZmzJNOijfkh7MgiTAti4wAAAAg"] [Sat Feb 21 18:29:09.335927 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /product/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/product/.env.staging"] [unique_id "aZmzJUgES1r21G00S1zSFAAAAAY"] [Sat Feb 21 18:29:10.669751 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/projbackend/.env"] [unique_id "aZmzJtOijfkh7MgiTAti5AAAAAg"] [Sat Feb 21 18:29:11.535890 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /projbackend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/projbackend/.env"] [unique_id "aZmzJ3rZ_c8LouBrYfy9EQAAAAU"] [Sat Feb 21 18:29:12.825925 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/project/.env"] [unique_id "aZmzKEgES1r21G00S1zSFgAAAAY"] [Sat Feb 21 18:29:13.723314 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/project/.env"] [unique_id "aZmzKcg8dzw2v7ML04Pu4wAAAAk"] [Sat Feb 21 18:29:15.091142 2026] [access_compat:error] [pid 2190981:tid 2190981] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/masterco/public_html/userfuns.php, referer: www.google.com [Sat Feb 21 18:29:15.167093 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/project_root/.env"] [unique_id "aZmzK9Oijfkh7MgiTAti5gAAAAg"] [Sat Feb 21 18:29:16.123758 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /project_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/project_root/.env"] [unique_id "aZmzLHrZ_c8LouBrYfy9FAAAAAU"] [Sat Feb 21 18:29:17.462087 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /protected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/protected/.env"] [unique_id "aZmzLTgyub9jMIOPIArzGgAAAAc"] [Sat Feb 21 18:29:18.300930 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /protected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/protected/.env"] [unique_id "aZmzLnrZ_c8LouBrYfy9FQAAAAU"] [Sat Feb 21 18:29:19.838626 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/psnlink/.env"] [unique_id "aZmzL5pe9KOFdAtIQx5ppAAAAAw"] [Sat Feb 21 18:29:20.814291 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /psnlink/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/psnlink/.env"] [unique_id "aZmzMEgES1r21G00S1zSGwAAAAY"] [Sat Feb 21 18:29:22.182509 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt2/countries/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/pt2/countries/src/.env"] [unique_id "aZmzMppe9KOFdAtIQx5ppQAAAAw"] [Sat Feb 21 18:29:23.009091 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt2/countries/src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/pt2/countries/src/.env"] [unique_id "aZmzM1MqSo7iS-0AaIsXtAAAABM"] [Sat Feb 21 18:29:24.332826 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt8/library-backend-gql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/pt8/library-backend-gql/.env"] [unique_id "aZmzNHrZ_c8LouBrYfy9GAAAAAU"] [Sat Feb 21 18:29:25.139765 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pt8/library-backend-gql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/pt8/library-backend-gql/.env"] [unique_id "aZmzNVMqSo7iS-0AaIsXtQAAABM"] [Sat Feb 21 18:29:26.745188 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pub/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/pub/.env"] [unique_id "aZmzNmxG-ZG_tIvrf97oiAAAAAM"] [Sat Feb 21 18:29:27.584270 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /pub/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/pub/.env"] [unique_id "aZmzN1MqSo7iS-0AaIsXtgAAABM"] [Sat Feb 21 18:29:30.481078 2026] [access_compat:error] [pid 2195998:tid 2195998] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/masterco/public_html/userfuns.php, referer: www.google.com [Sat Feb 21 18:29:30.979193 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/public_html/.env"] [unique_id "aZmzOnrZ_c8LouBrYfy9HQAAAAU"] [Sat Feb 21 18:29:31.808485 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/public_html/.env"] [unique_id "aZmzO1MqSo7iS-0AaIsXuAAAABM"] [Sat Feb 21 18:29:33.081679 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/public_root/.env"] [unique_id "aZmzPUuKN3Bz1O6Cf-gJ9gAAAAA"] [Sat Feb 21 18:29:33.962418 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /public_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/public_root/.env"] [unique_id "aZmzPVAuKWjBndpBvNwafgAAAAQ"] [Sat Feb 21 18:29:39.799340 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /question2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/question2/.env"] [unique_id "aZmzQzgyub9jMIOPIArzJAAAAAc"] [Sat Feb 21 18:29:40.964594 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /question2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/question2/.env"] [unique_id "aZmzRLhH1gqZ3dYvDyhWXgAAAAE"] [Sat Feb 21 18:29:41.455675 2026] [access_compat:error] [pid 2190227:tid 2190227] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/masterco/public_html/postnews.php, referer: www.google.com [Sat Feb 21 18:29:41.804047 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 51.68.107.142:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 18:29:41.804406 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 51.68.107.142:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 18:29:41.805176 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 51.68.107.142:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 18:29:42.239620 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qv-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/qv-frontend/.env"] [unique_id "aZmzRkuKN3Bz1O6Cf-gJ-wAAAAA"] [Sat Feb 21 18:29:43.088087 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /qv-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/qv-frontend/.env"] [unique_id "aZmzR9Oijfkh7MgiTAti-QAAAAg"] [Sat Feb 21 18:29:44.310844 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rabbitmq-cluster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rabbitmq-cluster/.env"] [unique_id "aZmzSFAuKWjBndpBvNwahQAAAAQ"] [Sat Feb 21 18:29:45.198132 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rabbitmq-cluster/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rabbitmq-cluster/.env"] [unique_id "aZmzSTgyub9jMIOPIArzJwAAAAc"] [Sat Feb 21 18:29:46.508270 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails-api/react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rails-api/react-app/.env"] [unique_id "aZmzSsg8dzw2v7ML04Pu8wAAAAk"] [Sat Feb 21 18:29:47.433563 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails-api/react-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rails-api/react-app/.env"] [unique_id "aZmzSzgyub9jMIOPIArzKAAAAAc"] [Sat Feb 21 18:29:48.840311 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rails/.env"] [unique_id "aZmzTHpA9eipntFQcueDKwAAABI"] [Sat Feb 21 18:29:49.700290 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rails/.env"] [unique_id "aZmzTTgyub9jMIOPIArzKQAAAAc"] [Sat Feb 21 18:29:51.174639 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rasax/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rasax/.env"] [unique_id "aZmzT8g8dzw2v7ML04Pu9gAAAAk"] [Sat Feb 21 18:29:52.391959 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rasax/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rasax/.env"] [unique_id "aZmzUHpA9eipntFQcueDLQAAABI"] [Sat Feb 21 18:29:52.896410 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/masterco/public_html/postnews.php, referer: www.google.com [Sat Feb 21 18:29:53.859112 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/react/.env"] [unique_id "aZmzUXrZ_c8LouBrYfy9LAAAAAU"] [Sat Feb 21 18:29:54.678305 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/react/.env"] [unique_id "aZmzUmxG-ZG_tIvrf97olgAAAAM"] [Sat Feb 21 18:29:56.060921 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react_todo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/react_todo/.env"] [unique_id "aZmzVEgES1r21G00S1zSMAAAAAY"] [Sat Feb 21 18:29:56.968512 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /react_todo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/react_todo/.env"] [unique_id "aZmzVMg8dzw2v7ML04Pu-gAAAAk"] [Sat Feb 21 18:29:58.339667 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /redmine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/redmine/.env"] [unique_id "aZmzVnrZ_c8LouBrYfy9LwAAAAU"] [Sat Feb 21 18:29:59.171999 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /redmine/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/redmine/.env"] [unique_id "aZmzVzgyub9jMIOPIArzLQAAAAc"] [Sat Feb 21 18:30:00.631870 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/repo/.env"] [unique_id "aZmzWLhH1gqZ3dYvDyhWagAAAAE"] [Sat Feb 21 18:30:01.603850 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/repo/.env"] [unique_id "aZmzWVMqSo7iS-0AaIsXygAAABM"] [Sat Feb 21 18:30:03.883924 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/repos/.env"] [unique_id "aZmzW0gES1r21G00S1zSNAAAAAY"] [Sat Feb 21 18:30:04.981730 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/repos/.env"] [unique_id "aZmzXFAuKWjBndpBvNwakgAAAAQ"] [Sat Feb 21 18:30:06.817444 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repository/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/repository/.env"] [unique_id "aZmzXrhH1gqZ3dYvDyhWbQAAAAE"] [Sat Feb 21 18:30:07.976059 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /repository/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/repository/.env"] [unique_id "aZmzX2xG-ZG_tIvrf97onwAAAAM"] [Sat Feb 21 18:30:09.396192 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resources/.env"] [unique_id "aZmzYXrZ_c8LouBrYfy9NQAAAAU"] [Sat Feb 21 18:30:10.328608 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmzYXrZ_c8LouBrYfy9NQAAAAU"] [Sat Feb 21 18:30:10.328681 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmzYXrZ_c8LouBrYfy9NQAAAAU"] [Sat Feb 21 18:30:10.421489 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resources/.env"] [unique_id "aZmzYmxG-ZG_tIvrf97ooAAAAAM"] [Sat Feb 21 18:30:12.084602 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resources/docker/.env"] [unique_id "aZmzZHpA9eipntFQcueDNwAAABI"] [Sat Feb 21 18:30:13.127270 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resources/docker/.env"] [unique_id "aZmzZUuKN3Bz1O6Cf-gKCgAAAAA"] [Sat Feb 21 18:30:14.692568 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resources/docker/mysql/.env"] [unique_id "aZmzZkgES1r21G00S1zSOwAAAAY"] [Sat Feb 21 18:30:15.275111 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzZ1AuKWjBndpBvNwalwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 18:30:15.275223 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzZ1AuKWjBndpBvNwalwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem [Sat Feb 21 18:30:15.735959 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/mysql/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resources/docker/mysql/.env"] [unique_id "aZmzZ3rZ_c8LouBrYfy9OAAAAAU"] [Sat Feb 21 18:30:17.228679 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/phpmyadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resources/docker/phpmyadmin/.env"] [unique_id "aZmzadOijfkh7MgiTAtjDwAAAAg"] [Sat Feb 21 18:30:18.229180 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/phpmyadmin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resources/docker/phpmyadmin/.env"] [unique_id "aZmzamxG-ZG_tIvrf97oowAAAAM"] [Sat Feb 21 18:30:19.665634 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rabbitmq/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resources/docker/rabbitmq/.env"] [unique_id "aZmza8g8dzw2v7ML04PvBgAAAAk"] [Sat Feb 21 18:30:20.640199 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rabbitmq/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resources/docker/rabbitmq/.env"] [unique_id "aZmzbLhH1gqZ3dYvDyhWdgAAAAE"] [Sat Feb 21 18:30:22.317678 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rediscommander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resources/docker/rediscommander/.env"] [unique_id "aZmzbppe9KOFdAtIQx5pxQAAAAw"] [Sat Feb 21 18:30:22.995185 2026] [security2:error] [pid 2197177:tid 2197177] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmzbdOijfkh7MgiTAtjEgAAAAg"] [Sat Feb 21 18:30:22.995263 2026] [security2:error] [pid 2197177:tid 2197177] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmzbdOijfkh7MgiTAtjEgAAAAg"] [Sat Feb 21 18:30:23.308811 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resources/docker/rediscommander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resources/docker/rediscommander/.env"] [unique_id "aZmzb1AuKWjBndpBvNwanAAAAAQ"] [Sat Feb 21 18:30:24.732526 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resourcesync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/resourcesync/.env"] [unique_id "aZmzcEuKN3Bz1O6Cf-gKEgAAAAA"] [Sat Feb 21 18:30:25.604062 2026] [security2:error] [pid 2197166:tid 2197166] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /resourcesync/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/resourcesync/.env"] [unique_id "aZmzcUgES1r21G00S1zSQgAAAAY"] [Sat Feb 21 18:30:27.985670 2026] [access_compat:error] [pid 2190981:tid 2190981] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:30:29.898102 2026] [security2:error] [pid 2201272:tid 2201272] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rest/.env"] [unique_id "aZmzdQ8gkjJaL5-9_NyHRgAAAAI"] [Sat Feb 21 18:30:30.029735 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/userfuns.php, referer: www.google.com [Sat Feb 21 18:30:30.826149 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rest/.env"] [unique_id "aZmzdsg8dzw2v7ML04PvDAAAAAk"] [Sat Feb 21 18:30:32.025290 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzd3rZ_c8LouBrYfy9QgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 18:30:32.025425 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzd3rZ_c8LouBrYfy9QgAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3 [Sat Feb 21 18:30:32.321984 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /restapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/restapi/.env"] [unique_id "aZmzeEuKN3Bz1O6Cf-gKFgAAAAA"] [Sat Feb 21 18:30:33.196283 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /restapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/restapi/.env"] [unique_id "aZmzeZpe9KOFdAtIQx5pzQAAAAw"] [Sat Feb 21 18:30:34.568321 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /results/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/results/.env"] [unique_id "aZmzekuKN3Bz1O6Cf-gKFwAAAAA"] [Sat Feb 21 18:30:35.423413 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /results/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/results/.env"] [unique_id "aZmzezgyub9jMIOPIArzQwAAAAc"] [Sat Feb 21 18:30:38.757280 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /robots/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/robots/.env"] [unique_id "aZmzfrhH1gqZ3dYvDyhWfwAAAAE"] [Sat Feb 21 18:30:39.607215 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /robots/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/robots/.env"] [unique_id "aZmzf8g8dzw2v7ML04PvEQAAAAk"] [Sat Feb 21 18:30:42.216577 2026] [access_compat:error] [pid 2187398:tid 2187398] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/postnews.php, referer: www.google.com [Sat Feb 21 18:30:43.197008 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/root/.env"] [unique_id "aZmzg0uKN3Bz1O6Cf-gKHQAAAAA"] [Sat Feb 21 18:30:44.263060 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/root/.env"] [unique_id "aZmzhHpA9eipntFQcueDSgAAABI"] [Sat Feb 21 18:30:45.784656 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rosterback/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rosterBack/.env"] [unique_id "aZmzhdOijfkh7MgiTAtjIQAAAAg"] [Sat Feb 21 18:30:47.000900 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rosterback/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rosterBack/.env"] [unique_id "aZmzhnpA9eipntFQcueDSwAAABI"] [Sat Feb 21 18:30:47.575158 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzh3rZ_c8LouBrYfy9SgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 18:30:47.575261 2026] [security2:error] [pid 2190981:tid 2190981] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzh3rZ_c8LouBrYfy9SgAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock [Sat Feb 21 18:30:48.592302 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcube/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/roundcube/.env"] [unique_id "aZmziHrZ_c8LouBrYfy9SwAAAAU"] [Sat Feb 21 18:30:49.493642 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcube/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/roundcube/.env"] [unique_id "aZmziXpA9eipntFQcueDTAAAABI"] [Sat Feb 21 18:30:51.011709 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcubemail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/roundcubemail/.env"] [unique_id "aZmzi3rZ_c8LouBrYfy9TAAAAAU"] [Sat Feb 21 18:30:51.917568 2026] [security2:error] [pid 2201272:tid 2201272] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /roundcubemail/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/roundcubemail/.env"] [unique_id "aZmziw8gkjJaL5-9_NyHUwAAAAI"] [Sat Feb 21 18:30:53.191518 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /routes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/routes/.env"] [unique_id "aZmzjcg8dzw2v7ML04PvFwAAAAk"] [Sat Feb 21 18:30:54.131360 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /routes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/routes/.env"] [unique_id "aZmzjppe9KOFdAtIQx5p2AAAAAw"] [Sat Feb 21 18:30:55.199075 2026] [access_compat:error] [pid 2197177:tid 2197177] [client 87.106.33.160:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/postnews.php, referer: www.google.com [Sat Feb 21 18:30:55.395157 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /run/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/run/.env"] [unique_id "aZmzj1MqSo7iS-0AaIsX6wAAABM"] [Sat Feb 21 18:30:56.237452 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /run/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/run/.env"] [unique_id "aZmzkFAuKWjBndpBvNwaqgAAAAQ"] [Sat Feb 21 18:30:57.530647 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rust-backend/.env"] [unique_id "aZmzkVMqSo7iS-0AaIsX7AAAABM"] [Sat Feb 21 18:30:58.452610 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rust-backend/.env"] [unique_id "aZmzktOijfkh7MgiTAtjKQAAAAg"] [Sat Feb 21 18:30:59.811677 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/dao/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/rust-backend/dao/.env"] [unique_id "aZmzkzgyub9jMIOPIArzUAAAAAc"] [Sat Feb 21 18:31:00.889850 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /rust-backend/dao/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/rust-backend/dao/.env"] [unique_id "aZmzlFMqSo7iS-0AaIsX7gAAABM"] [Sat Feb 21 18:31:02.964730 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s-with-me-front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/s-with-me-front/.env"] [unique_id "aZmzlnrZ_c8LouBrYfy9UgAAAAU"] [Sat Feb 21 18:31:03.895681 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /s-with-me-front/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/s-with-me-front/.env"] [unique_id "aZmzl1AuKWjBndpBvNwargAAAAQ"] [Sat Feb 21 18:31:05.661303 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:31:07.603194 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/saas/.env"] [unique_id "aZmzm3rZ_c8LouBrYfy9VQAAAAU"] [Sat Feb 21 18:31:08.596448 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /saas/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/saas/.env"] [unique_id "aZmznGxG-ZG_tIvrf97owAAAAAM"] [Sat Feb 21 18:31:09.889257 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/chatroom/chatroom-spa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/samples/chatroom/chatroom-spa/.env"] [unique_id "aZmznXrZ_c8LouBrYfy9VgAAAAU"] [Sat Feb 21 18:31:10.823799 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/chatroom/chatroom-spa/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/samples/chatroom/chatroom-spa/.env"] [unique_id "aZmznjgyub9jMIOPIArzVgAAAAc"] [Sat Feb 21 18:31:12.183909 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/docker/deploymentscripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "aZmzoMg8dzw2v7ML04PvIQAAAAk"] [Sat Feb 21 18:31:13.071168 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /samples/docker/deploymentscripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "aZmzoVAuKWjBndpBvNwaswAAAAQ"] [Sat Feb 21 18:31:16.497984 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /script/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/script/.env"] [unique_id "aZmzpGxG-ZG_tIvrf97oxQAAAAM"] [Sat Feb 21 18:31:17.550243 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /script/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/script/.env"] [unique_id "aZmzpbhH1gqZ3dYvDyhWlAAAAAE"] [Sat Feb 21 18:31:19.100022 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/scripts/.env"] [unique_id "aZmzp1MqSo7iS-0AaIsX-gAAABM"] [Sat Feb 21 18:31:20.090935 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/scripts/.env"] [unique_id "aZmzqFAuKWjBndpBvNwauAAAAAQ"] [Sat Feb 21 18:31:21.571209 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/fvt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/scripts/fvt/.env"] [unique_id "aZmzqXrZ_c8LouBrYfy9XAAAAAU"] [Sat Feb 21 18:31:22.489677 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /scripts/fvt/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/scripts/fvt/.env"] [unique_id "aZmzqrhH1gqZ3dYvDyhWlwAAAAE"] [Sat Feb 21 18:31:28.400950 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /secrets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/secrets/.env"] [unique_id "aZmzsNOijfkh7MgiTAtjOAAAAAg"] [Sat Feb 21 18:31:28.480087 2026] [security2:error] [pid 2191386:tid 2191386] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZmzrzgyub9jMIOPIArzYAAAAAc"] [Sat Feb 21 18:31:28.480238 2026] [security2:error] [pid 2191386:tid 2191386] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZmzrzgyub9jMIOPIArzYAAAAAc"] [Sat Feb 21 18:31:28.887820 2026] [access_compat:error] [pid 2187398:tid 2187398] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:31:29.278518 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /secrets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/secrets/.env"] [unique_id "aZmzsTgyub9jMIOPIArzYQAAAAc"] [Sat Feb 21 18:31:30.602897 2026] [security2:error] [pid 2201272:tid 2201272] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /selfish-darling-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/selfish-darling-backend/.env"] [unique_id "aZmzsg8gkjJaL5-9_NyHawAAAAI"] [Sat Feb 21 18:31:31.652224 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /selfish-darling-backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/selfish-darling-backend/.env"] [unique_id "aZmzs3pA9eipntFQcueDZQAAABI"] [Sat Feb 21 18:31:35.594394 2026] [security2:error] [pid 2201272:tid 2201272] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve-browserbench/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/serve-browserbench/.env"] [unique_id "aZmztw8gkjJaL5-9_NyHbwAAAAI"] [Sat Feb 21 18:31:36.502936 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve-browserbench/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/serve-browserbench/.env"] [unique_id "aZmzuDgyub9jMIOPIArzZQAAAAc"] [Sat Feb 21 18:31:37.970498 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Serve_time_server/.env"] [unique_id "aZmzuVAuKWjBndpBvNwawgAAAAQ"] [Sat Feb 21 18:31:38.982162 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /serve_time_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Serve_time_server/.env"] [unique_id "aZmzulMqSo7iS-0AaIsYCAAAABM"] [Sat Feb 21 18:31:41.007658 2026] [access_compat:error] [pid 2199724:tid 2199724] [client 165.231.182.114:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php, referer: https://rentacarkarachi.com/ [Sat Feb 21 18:31:42.361747 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/server.log"] [unique_id "aZmzvrhH1gqZ3dYvDyhWowAAAAE"] [Sat Feb 21 18:31:43.197774 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/server.log"] [unique_id "aZmzv3Mi1barCLgbQ6H0SwAAAAY"] [Sat Feb 21 18:31:44.356719 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/server/config/.env"] [unique_id "aZmzwNOijfkh7MgiTAtjQQAAAAg"] [Sat Feb 21 18:31:45.090190 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/server/config/.env"] [unique_id "aZmzwTgyub9jMIOPIArzagAAAAc"] [Sat Feb 21 18:31:45.843910 2026] [security2:error] [pid 2199724:tid 2199724] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzwcg8dzw2v7ML04PvNAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:31:45.843994 2026] [security2:error] [pid 2199724:tid 2199724] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzwcg8dzw2v7ML04PvNAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:31:46.478109 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/server/laravel/.env"] [unique_id "aZmzwnrZ_c8LouBrYfy9awAAAAU"] [Sat Feb 21 18:31:47.211067 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/server/laravel/.env"] [unique_id "aZmzw0uKN3Bz1O6Cf-gKPwAAAAA"] [Sat Feb 21 18:31:50.411772 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/src/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/server/src/persistence/.env"] [unique_id "aZmzxnpA9eipntFQcueDbwAAABI"] [Sat Feb 21 18:31:51.225983 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server/src/persistence/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/server/src/persistence/.env"] [unique_id "aZmzx9Oijfkh7MgiTAtjRAAAAAg"] [Sat Feb 21 18:31:52.449723 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Server_with_db/.env"] [unique_id "aZmzyEuKN3Bz1O6Cf-gKQgAAAAA"] [Sat Feb 21 18:31:53.282365 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /server_with_db/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Server_with_db/.env"] [unique_id "aZmzycg8dzw2v7ML04PvOQAAAAk"] [Sat Feb 21 18:31:55.860269 2026] [security2:error] [pid 2190249:tid 2190249] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-global": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmzynpA9eipntFQcueDcQAAABI"] [Sat Feb 21 18:31:55.860396 2026] [security2:error] [pid 2190249:tid 2190249] [client 35.236.197.187:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/mukyasenergy-ip": Permission denied [hostname "mukyasenergy.com"] [uri "/cgi-sys/ea-php83/xmlrpc.php"] [unique_id "aZmzynpA9eipntFQcueDcQAAABI"] [Sat Feb 21 18:31:58.429037 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/service/.env"] [unique_id "aZmzznrZ_c8LouBrYfy9cgAAAAU"] [Sat Feb 21 18:31:59.220485 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmzzVAuKWjBndpBvNwazQAAAAQ"] [Sat Feb 21 18:31:59.220536 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmzzVAuKWjBndpBvNwazQAAAAQ"] [Sat Feb 21 18:31:59.258351 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/service/.env"] [unique_id "aZmzz1MqSo7iS-0AaIsYEwAAABM"] [Sat Feb 21 18:31:59.944129 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzz0uKN3Bz1O6Cf-gKRgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:31:59.944211 2026] [security2:error] [pid 2187398:tid 2187398] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmzz0uKN3Bz1O6Cf-gKRgAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:32:00.354136 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/.env"] [unique_id "aZmz0FAuKWjBndpBvNwazgAAAAQ"] [Sat Feb 21 18:32:01.192612 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/.env"] [unique_id "aZmz0UuKN3Bz1O6Cf-gKRwAAAAA"] [Sat Feb 21 18:32:02.537609 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/adminer/.env"] [unique_id "aZmz0tOijfkh7MgiTAtjTAAAAAg"] [Sat Feb 21 18:32:03.328805 2026] [security2:error] [pid 2190981:tid 2190981] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo2.247reactionpower.com"] [uri "/api/.env"] [unique_id "aZmz03rZ_c8LouBrYfy9dQAAAAU"] [Sat Feb 21 18:32:03.399746 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/adminer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/adminer/.env"] [unique_id "aZmz0zgyub9jMIOPIArzdQAAAAc"] [Sat Feb 21 18:32:04.629916 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/deployment-agent/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/deployment-agent/.env"] [unique_id "aZmz1EuKN3Bz1O6Cf-gKSQAAAAA"] [Sat Feb 21 18:32:05.498910 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/deployment-agent/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/deployment-agent/.env"] [unique_id "aZmz1XrZ_c8LouBrYfy9dwAAAAU"] [Sat Feb 21 18:32:06.670978 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/documents/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/documents/.env"] [unique_id "aZmz1mxG-ZG_tIvrf97o3QAAAAM"] [Sat Feb 21 18:32:07.262098 2026] [security2:error] [pid 2195998:tid 2195998] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo2.247reactionpower.com"] [uri "/.env"] [unique_id "aZmz17hH1gqZ3dYvDyhWsAAAAAE"] [Sat Feb 21 18:32:07.446862 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/documents/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/documents/.env"] [unique_id "aZmz13Mi1barCLgbQ6H0VwAAAAY"] [Sat Feb 21 18:32:08.703888 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/graylog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/graylog/.env"] [unique_id "aZmz2HpA9eipntFQcueDeAAAABI"] [Sat Feb 21 18:32:09.503567 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/graylog/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/graylog/.env"] [unique_id "aZmz2XMi1barCLgbQ6H0WAAAAAY"] [Sat Feb 21 18:32:10.599895 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/jaeger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/jaeger/.env"] [unique_id "aZmz2nrZ_c8LouBrYfy9egAAAAU"] [Sat Feb 21 18:32:11.375574 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/jaeger/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/jaeger/.env"] [unique_id "aZmz27hH1gqZ3dYvDyhWswAAAAE"] [Sat Feb 21 18:32:12.474551 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/minio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/minio/.env"] [unique_id "aZmz3Dgyub9jMIOPIArzegAAAAc"] [Sat Feb 21 18:32:13.229067 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/minio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/minio/.env"] [unique_id "aZmz3bhH1gqZ3dYvDyhWtAAAAAE"] [Sat Feb 21 18:32:14.447512 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/monitoring/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/monitoring/.env"] [unique_id "aZmz3ppe9KOFdAtIQx5qCAAAAAw"] [Sat Feb 21 18:32:15.275105 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/monitoring/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/monitoring/.env"] [unique_id "aZmz32xG-ZG_tIvrf97o5AAAAAM"] [Sat Feb 21 18:32:16.272881 2026] [security2:error] [pid 2190249:tid 2190249] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZmz3npA9eipntFQcueDfQAAABI"] [Sat Feb 21 18:32:16.272945 2026] [security2:error] [pid 2190249:tid 2190249] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZmz3npA9eipntFQcueDfQAAABI"] [Sat Feb 21 18:32:16.629399 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/portainer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/portainer/.env"] [unique_id "aZmz4HpA9eipntFQcueDfgAAABI"] [Sat Feb 21 18:32:17.416901 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/portainer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/portainer/.env"] [unique_id "aZmz4UuKN3Bz1O6Cf-gKUQAAAAA"] [Sat Feb 21 18:32:18.704530 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/redis-commander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/redis-commander/.env"] [unique_id "aZmz4sg8dzw2v7ML04PvSgAAAAk"] [Sat Feb 21 18:32:19.595888 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/redis-commander/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/redis-commander/.env"] [unique_id "aZmz4zgyub9jMIOPIArzgAAAAAc"] [Sat Feb 21 18:32:20.838233 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/registry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/registry/.env"] [unique_id "aZmz5HrZ_c8LouBrYfy9ggAAAAU"] [Sat Feb 21 18:32:21.719026 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/registry/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/registry/.env"] [unique_id "aZmz5VMqSo7iS-0AaIsYIQAAABM"] [Sat Feb 21 18:32:22.849591 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/simcore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/simcore/.env"] [unique_id "aZmz5npA9eipntFQcueDgQAAABI"] [Sat Feb 21 18:32:23.547194 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/simcore/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/simcore/.env"] [unique_id "aZmz59Oijfkh7MgiTAtjWQAAAAg"] [Sat Feb 21 18:32:24.759520 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/traefik/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/services/traefik/.env"] [unique_id "aZmz6Jpe9KOFdAtIQx5qEAAAAAw"] [Sat Feb 21 18:32:25.365281 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmz6VMqSo7iS-0AaIsYIwAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi [Sat Feb 21 18:32:25.365354 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmz6VMqSo7iS-0AaIsYIwAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi [Sat Feb 21 18:32:25.789652 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /services/traefik/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/services/traefik/.env"] [unique_id "aZmz6dOijfkh7MgiTAtjWgAAAAg"] [Sat Feb 21 18:32:26.896658 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sessions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sessions/.env"] [unique_id "aZmz6sg8dzw2v7ML04PvTgAAAAk"] [Sat Feb 21 18:32:27.575360 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sessions/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sessions/.env"] [unique_id "aZmz62xG-ZG_tIvrf97o6wAAAAM"] [Sat Feb 21 18:32:30.465169 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmz7WxG-ZG_tIvrf97o7AAAAAM"] [Sat Feb 21 18:32:30.465276 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZmz7WxG-ZG_tIvrf97o7AAAAAM"] [Sat Feb 21 18:32:30.540645 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/shared/.env"] [unique_id "aZmz7kuKN3Bz1O6Cf-gKWQAAAAA"] [Sat Feb 21 18:32:31.314198 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shared/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/shared/.env"] [unique_id "aZmz73pA9eipntFQcueDhgAAABI"] [Sat Feb 21 18:32:32.469475 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shibboleth/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/shibboleth/.env"] [unique_id "aZmz8FMqSo7iS-0AaIsYKAAAABM"] [Sat Feb 21 18:32:33.247137 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shibboleth/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/shibboleth/.env"] [unique_id "aZmz8dOijfkh7MgiTAtjXwAAAAg"] [Sat Feb 21 18:32:34.695439 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/shop/.env"] [unique_id "aZmz8jgyub9jMIOPIArzhwAAAAc"] [Sat Feb 21 18:32:35.489112 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shop/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/shop/.env"] [unique_id "aZmz83Mi1barCLgbQ6H0agAAAAY"] [Sat Feb 21 18:32:36.657674 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopware/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/shopware/.env"] [unique_id "aZmz9Jpe9KOFdAtIQx5qGAAAAAw"] [Sat Feb 21 18:32:37.427965 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /shopware/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/shopware/.env"] [unique_id "aZmz9XMi1barCLgbQ6H0awAAAAY"] [Sat Feb 21 18:32:38.557783 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Simple_server/.env"] [unique_id "aZmz9jgyub9jMIOPIArzigAAAAc"] [Sat Feb 21 18:32:39.461764 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /simple_server/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Simple_server/.env"] [unique_id "aZmz93Mi1barCLgbQ6H0bAAAAAY"] [Sat Feb 21 18:32:40.536145 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site-library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/site-library/.env"] [unique_id "aZmz-FAuKWjBndpBvNwa5AAAAAQ"] [Sat Feb 21 18:32:41.341366 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /site-library/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/site-library/.env"] [unique_id "aZmz-bhH1gqZ3dYvDyhWxQAAAAE"] [Sat Feb 21 18:32:42.474789 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sitemaps/.env"] [unique_id "aZmz-lAuKWjBndpBvNwa5QAAAAQ"] [Sat Feb 21 18:32:43.177829 2026] [security2:error] [pid 2199724:tid 2199724] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmz-8g8dzw2v7ML04PvVwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:32:43.177937 2026] [security2:error] [pid 2199724:tid 2199724] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZmz-8g8dzw2v7ML04PvVwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:32:43.204076 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitemaps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sitemaps/.env"] [unique_id "aZmz-7hH1gqZ3dYvDyhWxgAAAAE"] [Sat Feb 21 18:32:44.413112 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sites/.env"] [unique_id "aZmz_Mg8dzw2v7ML04PvWAAAAAk"] [Sat Feb 21 18:32:45.296281 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sites/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sites/.env"] [unique_id "aZmz_bhH1gqZ3dYvDyhWxwAAAAE"] [Sat Feb 21 18:32:46.396210 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitestatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sitestatic/.env"] [unique_id "aZmz_kuKN3Bz1O6Cf-gKZQAAAAA"] [Sat Feb 21 18:32:47.172333 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sitestatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sitestatic/.env"] [unique_id "aZmz_3rZ_c8LouBrYfy9kgAAAAU"] [Sat Feb 21 18:32:48.522779 2026] [security2:error] [pid 2201272:tid 2201272] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Socketio/.env"] [unique_id "aZm0AA8gkjJaL5-9_NyHmgAAAAI"] [Sat Feb 21 18:32:49.137008 2026] [security2:error] [pid 2195998:tid 2195998] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmz_7hH1gqZ3dYvDyhWyAAAAAE"] [Sat Feb 21 18:32:49.137071 2026] [security2:error] [pid 2195998:tid 2195998] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "www.noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZmz_7hH1gqZ3dYvDyhWyAAAAAE"] [Sat Feb 21 18:32:49.338564 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /socketio/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Socketio/.env"] [unique_id "aZm0AXrZ_c8LouBrYfy9kwAAAAU"] [Sat Feb 21 18:32:50.566106 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /source/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/source/.env"] [unique_id "aZm0AtOijfkh7MgiTAtjawAAAAg"] [Sat Feb 21 18:32:51.374236 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /source/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/source/.env"] [unique_id "aZm0A3pA9eipntFQcueDkwAAABI"] [Sat Feb 21 18:32:52.532904 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sources/.env"] [unique_id "aZm0BEuKN3Bz1O6Cf-gKaQAAAAA"] [Sat Feb 21 18:32:53.364823 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sources/.env"] [unique_id "aZm0Bcg8dzw2v7ML04PvXQAAAAk"] [Sat Feb 21 18:32:54.602707 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Sources/API/.env"] [unique_id "aZm0BnpA9eipntFQcueDlQAAABI"] [Sat Feb 21 18:32:55.545452 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Sources/API/.env"] [unique_id "aZm0B7hH1gqZ3dYvDyhWzAAAAAE"] [Sat Feb 21 18:32:55.791365 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:32:56.381380 2026] [security2:error] [pid 2199724:tid 2199724] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm0B8g8dzw2v7ML04PvXgAAAAk"] [Sat Feb 21 18:32:56.381444 2026] [security2:error] [pid 2199724:tid 2199724] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm0B8g8dzw2v7ML04PvXgAAAAk"] [Sat Feb 21 18:32:56.754994 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spearmint/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/spearmint/.env"] [unique_id "aZm0CHrZ_c8LouBrYfy9mQAAAAU"] [Sat Feb 21 18:32:57.667070 2026] [security2:error] [pid 2202599:tid 2202599] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spearmint/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/spearmint/.env"] [unique_id "aZm0CeDP1JPqFmDrNAGzSAAAAAs"] [Sat Feb 21 18:32:58.787829 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:32:58.865431 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spikes/config-material-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/spikes/config-material-app/.env"] [unique_id "aZm0CrhH1gqZ3dYvDyhWzgAAAAE"] [Sat Feb 21 18:32:59.698200 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spikes/config-material-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/spikes/config-material-app/.env"] [unique_id "aZm0C3Mi1barCLgbQ6H0eQAAAAY"] [Sat Feb 21 18:33:00.946242 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/SpotiApps/.env"] [unique_id "aZm0DHrZ_c8LouBrYfy9mwAAAAU"] [Sat Feb 21 18:33:01.821830 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /spotiapps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/SpotiApps/.env"] [unique_id "aZm0DavNzP61ajPGv11NBQAAAAo"] [Sat Feb 21 18:33:03.198522 2026] [security2:error] [pid 2202599:tid 2202599] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/instancewithdependentsteps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "aZm0D-DP1JPqFmDrNAGzSwAAAAs"] [Sat Feb 21 18:33:04.070585 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/instancewithdependentsteps/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "aZm0EHrZ_c8LouBrYfy9nQAAAAU"] [Sat Feb 21 18:33:05.355163 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptintegrationproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "aZm0EavNzP61ajPGv11NBwAAAAo"] [Sat Feb 21 18:33:06.221173 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptintegrationproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "aZm0EnrZ_c8LouBrYfy9ngAAAAU"] [Sat Feb 21 18:33:07.547885 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "aZm0Ezgyub9jMIOPIArzmAAAAAc"] [Sat Feb 21 18:33:08.333350 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/__tests__/__fixtures__/typeScriptProject/.env"] [unique_id "aZm0FHrZ_c8LouBrYfy9nwAAAAU"] [Sat Feb 21 18:33:09.761387 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptvisualizeproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "aZm0FUuKN3Bz1O6Cf-gKcgAAAAA"] [Sat Feb 21 18:33:10.531199 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/__tests__/__fixtures__/typescriptvisualizeproject/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/__tests__/__fixtures__/typeScriptVisualizeProject/.env"] [unique_id "aZm0FnrZ_c8LouBrYfy9oAAAAAU"] [Sat Feb 21 18:33:11.716381 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/add-auth/express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/add-auth/express/.env"] [unique_id "aZm0F0uKN3Bz1O6Cf-gKcwAAAAA"] [Sat Feb 21 18:33:12.477367 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/add-auth/express/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/add-auth/express/.env"] [unique_id "aZm0GHrZ_c8LouBrYfy9oQAAAAU"] [Sat Feb 21 18:33:13.684621 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/assembly/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/assembly/.env"] [unique_id "aZm0GUuKN3Bz1O6Cf-gKdAAAAAA"] [Sat Feb 21 18:33:14.463464 2026] [security2:error] [pid 2202599:tid 2202599] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/assembly/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/assembly/.env"] [unique_id "aZm0GuDP1JPqFmDrNAGzUQAAAAs"] [Sat Feb 21 18:33:15.623151 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/character-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/character-service/.env"] [unique_id "aZm0G0uKN3Bz1O6Cf-gKdQAAAAA"] [Sat Feb 21 18:33:16.309451 2026] [security2:error] [pid 2197177:tid 2197177] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/hello.world"] [unique_id "aZm0HNOijfkh7MgiTAtjeQAAAAg"] [Sat Feb 21 18:33:16.309597 2026] [security2:error] [pid 2197177:tid 2197177] [client 161.97.163.144:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/hello.world"] [unique_id "aZm0HNOijfkh7MgiTAtjeQAAAAg"] [Sat Feb 21 18:33:16.481367 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/character-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/character-service/.env"] [unique_id "aZm0HHpA9eipntFQcueDowAAABI"] [Sat Feb 21 18:33:17.646704 2026] [security2:error] [pid 2187398:tid 2187398] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/client/mobile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/client/mobile/.env"] [unique_id "aZm0HUuKN3Bz1O6Cf-gKdgAAAAA"] [Sat Feb 21 18:33:18.065242 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:\\\\xadd allow_url_include=1 \\\\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "71"] [id "933120"] [rev "1"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:\\x5c\\x5cxadd allow_url_include=1 \\x5c\\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php:/input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/"] [unique_id "aZm0HnrZ_c8LouBrYfy9pAAAAAU"] [Sat Feb 21 18:33:18.065391 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "96"] [id "933140"] [msg "PHP Injection Attack: I/O Stream Found"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/"] [unique_id "aZm0HnrZ_c8LouBrYfy9pAAAAAU"] [Sat Feb 21 18:33:18.402733 2026] [security2:error] [pid 2202599:tid 2202599] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/client/mobile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/client/mobile/.env"] [unique_id "aZm0HuDP1JPqFmDrNAGzUwAAAAs"] [Sat Feb 21 18:33:19.735731 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/core/tests/dotenv-files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "aZm0H6vNzP61ajPGv11NEQAAAAo"] [Sat Feb 21 18:33:19.750828 2026] [security2:error] [pid 2201885:tid 2201885] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0H3Mi1barCLgbQ6H0ggAAAAY"] [Sat Feb 21 18:33:20.628493 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/core/tests/dotenv-files/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "aZm0IGxG-ZG_tIvrf97pDQAAAAM"] [Sat Feb 21 18:33:21.531089 2026] [security2:error] [pid 2187398:tid 2187398] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZm0IUuKN3Bz1O6Cf-gKeAAAAAA"] [Sat Feb 21 18:33:21.994620 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/gameprovider-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/gameprovider-service/.env"] [unique_id "aZm0IVAuKWjBndpBvNwa_wAAAAQ"] [Sat Feb 21 18:33:22.917002 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/gameprovider-service/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/gameprovider-service/.env"] [unique_id "aZm0ImxG-ZG_tIvrf97pDgAAAAM"] [Sat Feb 21 18:33:23.900528 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0I3rZ_c8LouBrYfy9qAAAAAU"] [Sat Feb 21 18:33:24.289168 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/main/front-end/.env"] [unique_id "aZm0JKvNzP61ajPGv11NFAAAAAo"] [Sat Feb 21 18:33:25.116650 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/front-end/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/main/front-end/.env"] [unique_id "aZm0Jcg8dzw2v7ML04PvbQAAAAk"] [Sat Feb 21 18:33:25.620633 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0JVAuKWjBndpBvNwbAQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 18:33:25.620716 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0JVAuKWjBndpBvNwbAQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 18:33:25.752688 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZm0JXrZ_c8LouBrYfy9qQAAAAU"] [Sat Feb 21 18:33:26.434151 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/resources/archetype-resources/__rootartifactid__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "aZm0JlMqSo7iS-0AaIsYRwAAABM"] [Sat Feb 21 18:33:27.191898 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/main/resources/archetype-resources/__rootartifactid__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/main/resources/archetype-resources/__rootArtifactId__-acceptance-test/src/test/resources/app-launcher-tile/.env"] [unique_id "aZm0J2xG-ZG_tIvrf97pEAAAAAM"] [Sat Feb 21 18:33:28.090385 2026] [security2:error] [pid 2191386:tid 2191386] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aZm0KDgyub9jMIOPIArzpAAAAAc"] [Sat Feb 21 18:33:28.368652 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/renderer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/src/renderer/.env"] [unique_id "aZm0KJpe9KOFdAtIQx5qOwAAAAw"] [Sat Feb 21 18:33:29.252093 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /src/renderer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/src/renderer/.env"] [unique_id "aZm0KWxG-ZG_tIvrf97pEQAAAAM"] [Sat Feb 21 18:33:30.163917 2026] [security2:error] [pid 2172634:tid 2172634] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0Kppe9KOFdAtIQx5qPAAAAAw"] [Sat Feb 21 18:33:30.565959 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/controller/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/srv6_controller/controller/.env"] [unique_id "aZm0KlAuKWjBndpBvNwbBAAAAAQ"] [Sat Feb 21 18:33:31.378825 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/controller/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/srv6_controller/controller/.env"] [unique_id "aZm0K2xG-ZG_tIvrf97pEgAAAAM"] [Sat Feb 21 18:33:32.058220 2026] [security2:error] [pid 2118467:tid 2118467] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0LFAuKWjBndpBvNwbBQAAAAQ"] [Sat Feb 21 18:33:32.687198 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/srv6_controller/examples/.env"] [unique_id "aZm0LFMqSo7iS-0AaIsYSwAAABM"] [Sat Feb 21 18:33:33.436838 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/examples/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/srv6_controller/examples/.env"] [unique_id "aZm0LWxG-ZG_tIvrf97pEwAAAAM"] [Sat Feb 21 18:33:33.659328 2026] [security2:error] [pid 2199724:tid 2199724] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZm0Lcg8dzw2v7ML04PvbwAAAAk"] [Sat Feb 21 18:33:34.751242 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/node-manager/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/srv6_controller/node-manager/.env"] [unique_id "aZm0LnpA9eipntFQcueDrwAAABI"] [Sat Feb 21 18:33:35.417840 2026] [security2:error] [pid 2118467:tid 2118467] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0L1AuKWjBndpBvNwbBwAAAAQ"] [Sat Feb 21 18:33:35.553019 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /srv6_controller/node-manager/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/srv6_controller/node-manager/.env"] [unique_id "aZm0L1MqSo7iS-0AaIsYTQAAABM"] [Sat Feb 21 18:33:36.829637 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:33:36.858960 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /st-js-be-2020-movies-two/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/st-js-be-2020-movies-two/.env"] [unique_id "aZm0MHrZ_c8LouBrYfy9sAAAAAU"] [Sat Feb 21 18:33:37.038856 2026] [security2:error] [pid 2195998:tid 2195998] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZm0MbhH1gqZ3dYvDyhW4gAAAAE"] [Sat Feb 21 18:33:37.740933 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /st-js-be-2020-movies-two/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/st-js-be-2020-movies-two/.env"] [unique_id "aZm0MVMqSo7iS-0AaIsYTgAAABM"] [Sat Feb 21 18:33:38.513642 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0MnrZ_c8LouBrYfy9sQAAAAU"] [Sat Feb 21 18:33:39.850951 2026] [security2:error] [pid 2202872:tid 2202872] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZm0M0-1x314J6ndw4Ny6gAAAAI"] [Sat Feb 21 18:33:41.336053 2026] [security2:error] [pid 2202599:tid 2202599] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0NeDP1JPqFmDrNAGzZgAAAAs"] [Sat Feb 21 18:33:41.674871 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stackato-pkg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/stackato-pkg/.env"] [unique_id "aZm0NXrZ_c8LouBrYfy9uAAAAAU"] [Sat Feb 21 18:33:42.588277 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stackato-pkg/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/stackato-pkg/.env"] [unique_id "aZm0NlMqSo7iS-0AaIsYUgAAABM"] [Sat Feb 21 18:33:43.167904 2026] [security2:error] [pid 2191386:tid 2191386] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aZm0Nzgyub9jMIOPIArzsAAAAAc"] [Sat Feb 21 18:33:43.984386 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/stag/.env"] [unique_id "aZm0N5pe9KOFdAtIQx5qRgAAAAw"] [Sat Feb 21 18:33:44.670654 2026] [security2:error] [pid 2201885:tid 2201885] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0OHMi1barCLgbQ6H0kwAAAAY"] [Sat Feb 21 18:33:44.868921 2026] [security2:error] [pid 2202599:tid 2202599] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stag/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/stag/.env"] [unique_id "aZm0OODP1JPqFmDrNAGzaAAAAAs"] [Sat Feb 21 18:33:46.050759 2026] [security2:error] [pid 2190250:tid 2190250] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0OlMqSo7iS-0AaIsYVAAAABM"] [Sat Feb 21 18:33:47.519665 2026] [security2:error] [pid 2202872:tid 2202872] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0O0-1x314J6ndw4Ny8gAAAAI"] [Sat Feb 21 18:33:48.842601 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:33:49.193783 2026] [security2:error] [pid 2190249:tid 2190249] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0PXpA9eipntFQcueDvAAAABI"] [Sat Feb 21 18:33:50.104510 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0PTgyub9jMIOPIArztAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A6 [Sat Feb 21 18:33:50.104580 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0PTgyub9jMIOPIArztAAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A6 [Sat Feb 21 18:33:50.496563 2026] [security2:error] [pid 2190227:tid 2190227] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0PmxG-ZG_tIvrf97pIwAAAAM"] [Sat Feb 21 18:33:50.512699 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/staging/api/.env"] [unique_id "aZm0Pk-1x314J6ndw4Ny9AAAAAI"] [Sat Feb 21 18:33:50.754949 2026] [security2:error] [pid 2172634:tid 2172634] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZm0PZpe9KOFdAtIQx5qSQAAAAw"] [Sat Feb 21 18:33:50.755069 2026] [security2:error] [pid 2172634:tid 2172634] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZm0PZpe9KOFdAtIQx5qSQAAAAw"] [Sat Feb 21 18:33:51.398565 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/staging/api/.env"] [unique_id "aZm0P7hH1gqZ3dYvDyhW7QAAAAE"] [Sat Feb 21 18:33:52.069152 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0QHrZ_c8LouBrYfy9vgAAAAU"] [Sat Feb 21 18:33:52.411936 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0QHpA9eipntFQcueDvgAAABI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:33:52.412014 2026] [security2:error] [pid 2190249:tid 2190249] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0QHpA9eipntFQcueDvgAAABI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:33:52.671944 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/staging/backend/.env"] [unique_id "aZm0QJpe9KOFdAtIQx5qSwAAAAw"] [Sat Feb 21 18:33:53.429886 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/staging/backend/.env"] [unique_id "aZm0QVMqSo7iS-0AaIsYWQAAABM"] [Sat Feb 21 18:33:53.574895 2026] [security2:error] [pid 2191386:tid 2191386] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0QTgyub9jMIOPIArzuAAAAAc"] [Sat Feb 21 18:33:54.674231 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/staging/frontend/.env"] [unique_id "aZm0QqvNzP61ajPGv11NJQAAAAo"] [Sat Feb 21 18:33:55.093252 2026] [security2:error] [pid 2118467:tid 2118467] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0Q1AuKWjBndpBvNwbEgAAAAQ"] [Sat Feb 21 18:33:55.485691 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staging/frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/staging/frontend/.env"] [unique_id "aZm0Q7hH1gqZ3dYvDyhW8AAAAAE"] [Sat Feb 21 18:33:56.666142 2026] [security2:error] [pid 2190250:tid 2190250] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0RFMqSo7iS-0AaIsYWwAAABM"] [Sat Feb 21 18:33:56.676043 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-collected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static-collected/.env"] [unique_id "aZm0RHMi1barCLgbQ6H0mwAAAAY"] [Sat Feb 21 18:33:57.475511 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-collected/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static-collected/.env"] [unique_id "aZm0RavNzP61ajPGv11NJwAAAAo"] [Sat Feb 21 18:33:57.591966 2026] [security2:error] [pid 2195998:tid 2195998] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0RbhH1gqZ3dYvDyhW8QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:33:57.592028 2026] [security2:error] [pid 2195998:tid 2195998] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0RbhH1gqZ3dYvDyhW8QAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:33:58.557101 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static-html/.env"] [unique_id "aZm0RrhH1gqZ3dYvDyhW8gAAAAE"] [Sat Feb 21 18:33:59.148393 2026] [security2:error] [pid 2202872:tid 2202872] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0R0-1x314J6ndw4Ny-QAAAAI"] [Sat Feb 21 18:33:59.419532 2026] [security2:error] [pid 2199724:tid 2199724] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-html/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static-html/.env"] [unique_id "aZm0R8g8dzw2v7ML04PvgwAAAAk"] [Sat Feb 21 18:34:00.813715 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static-root/.env"] [unique_id "aZm0SE-1x314J6ndw4Ny-gAAAAI"] [Sat Feb 21 18:34:01.137113 2026] [security2:error] [pid 2118467:tid 2118467] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0SVAuKWjBndpBvNwbFgAAAAQ"] [Sat Feb 21 18:34:01.704944 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static-root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static-root/.env"] [unique_id "aZm0SVMqSo7iS-0AaIsYXgAAABM"] [Sat Feb 21 18:34:03.107814 2026] [security2:error] [pid 2202581:tid 2202581] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static/.env"] [unique_id "aZm0S6vNzP61ajPGv11NLAAAAAo"] [Sat Feb 21 18:34:03.785596 2026] [security2:error] [pid 2190249:tid 2190249] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0S3pA9eipntFQcueDyQAAABI"] [Sat Feb 21 18:34:03.979209 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static/.env"] [unique_id "aZm0S5pe9KOFdAtIQx5qVgAAAAw"] [Sat Feb 21 18:34:05.188345 2026] [security2:error] [pid 2195998:tid 2195998] [client 136.112.49.38:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-global": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZm0TLhH1gqZ3dYvDyhW9wAAAAE"] [Sat Feb 21 18:34:05.188455 2026] [security2:error] [pid 2195998:tid 2195998] [client 136.112.49.38:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/rentacarkarachi-ip": Permission denied [hostname "haq.rentacarkarachi.com"] [uri "/index.php"] [unique_id "aZm0TLhH1gqZ3dYvDyhW9wAAAAE"] [Sat Feb 21 18:34:05.857504 2026] [security2:error] [pid 2190227:tid 2190227] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0TWxG-ZG_tIvrf97pLgAAAAM"] [Sat Feb 21 18:34:07.780094 2026] [security2:error] [pid 2172634:tid 2172634] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0T5pe9KOFdAtIQx5qWQAAAAw"] [Sat Feb 21 18:34:07.982682 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0Tzgyub9jMIOPIArzwQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:34:07.982776 2026] [security2:error] [pid 2191386:tid 2191386] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0Tzgyub9jMIOPIArzwQAAAAc"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:34:09.907012 2026] [security2:error] [pid 2172634:tid 2172634] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0UZpe9KOFdAtIQx5qWgAAAAw"] [Sat Feb 21 18:34:11.874491 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:34:12.026539 2026] [security2:error] [pid 2201885:tid 2201885] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0VHMi1barCLgbQ6H0pAAAAAY"] [Sat Feb 21 18:34:14.080436 2026] [cgi:error] [pid 2190227:tid 2190227] [client 104.46.236.39:0] AH02812: stderr from /home/roknasateer/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 18:34:14.291861 2026] [security2:error] [pid 2202872:tid 2202872] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0Vk-1x314J6ndw4NzAwAAAAI"] [Sat Feb 21 18:34:16.240482 2026] [security2:error] [pid 2172634:tid 2172634] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0WJpe9KOFdAtIQx5qXQAAAAw"] [Sat Feb 21 18:34:18.464077 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0WnrZ_c8LouBrYfy9zgAAAAU"] [Sat Feb 21 18:34:20.255815 2026] [security2:error] [pid 2118467:tid 2118467] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0XFAuKWjBndpBvNwbIgAAAAQ"] [Sat Feb 21 18:34:21.939046 2026] [security2:error] [pid 2191386:tid 2191386] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0XTgyub9jMIOPIArzywAAAAc"] [Sat Feb 21 18:34:23.659064 2026] [security2:error] [pid 2190227:tid 2190227] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0X2xG-ZG_tIvrf97pOAAAAAM"] [Sat Feb 21 18:34:24.417502 2026] [access_compat:error] [pid 2197177:tid 2197177] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:34:25.169853 2026] [security2:error] [pid 2203361:tid 2203361] [client 161.97.163.144:0] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "37.60.246.33"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZm0YZYwa7au7xLd9Ha26wAAAAo"] [Sat Feb 21 18:34:26.629551 2026] [security2:error] [pid 2190981:tid 2190981] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0YnrZ_c8LouBrYfy91AAAAAU"] [Sat Feb 21 18:34:28.216059 2026] [security2:error] [pid 2118467:tid 2118467] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/public/index.php"] [unique_id "aZm0ZFAuKWjBndpBvNwbJgAAAAQ"] [Sat Feb 21 18:34:29.887239 2026] [security2:error] [pid 2203202:tid 2203202] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "call_user_func" at ARGS:function. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "145"] [id "933150"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Name Found"] [data "Matched Data: call_user_func found within ARGS:function: call_user_func_array"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/public/index.php"] [unique_id "aZm0Zc1oL3kMBEDxMn8u8gAAAAA"] [Sat Feb 21 18:34:31.429883 2026] [security2:error] [pid 2199724:tid 2199724] [client 161.97.163.144:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0Z8g8dzw2v7ML04PvlgAAAAk"] [Sat Feb 21 18:34:31.430024 2026] [security2:error] [pid 2199724:tid 2199724] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\\x22hi\\x22));?>+/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0Z8g8dzw2v7ML04PvlgAAAAk"] [Sat Feb 21 18:34:31.430101 2026] [security2:error] [pid 2199724:tid 2199724] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create /&/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0Z8g8dzw2v7ML04PvlgAAAAk"] [Sat Feb 21 18:34:31.430226 2026] [security2:error] [pid 2199724:tid 2199724] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create/&/<?echo(md5(hi)) ?>/tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0Z8g8dzw2v7ML04PvlgAAAAk"] [Sat Feb 21 18:34:31.430781 2026] [security2:error] [pid 2199724:tid 2199724] [client 161.97.163.144:0] ModSecurity: Warning. Pattern match "(?:<\\\\?(?!xml\\\\s)|<\\\\?php|\\\\[(?:/|\\\\\\\\)?php\\\\])" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "41"] [id "933100"] [msg "PHP Injection Attack: PHP Open Tag Found"] [data "Matched Data: <? found within ARGS_NAMES:/<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php: /<?echo(md5(\\x22hi\\x22));?> /tmp/index1.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "OWASP_TOP_10/A1"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0Z8g8dzw2v7ML04PvlgAAAAk"] [Sat Feb 21 18:34:33.062720 2026] [security2:error] [pid 2201885:tid 2201885] [client 161.97.163.144:0] ModSecurity: Warning. Pattern match "(?i)(?:\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "29"] [id "930100"] [rev "3"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0aXMi1barCLgbQ6H0sgAAAAY"] [Sat Feb 21 18:34:33.062853 2026] [security2:error] [pid 2201885:tid 2201885] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0aXMi1barCLgbQ6H0sgAAAAY"] [Sat Feb 21 18:34:33.063591 2026] [security2:error] [pid 2201885:tid 2201885] [client 161.97.163.144:0] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "37.60.246.33"] [uri "/index.php"] [unique_id "aZm0aXMi1barCLgbQ6H0sgAAAAY"] [Sat Feb 21 18:34:33.398317 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static_prod/.env"] [unique_id "aZm0aU-1x314J6ndw4NzDQAAAAI"] [Sat Feb 21 18:34:34.323758 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_prod/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static_prod/.env"] [unique_id "aZm0as1oL3kMBEDxMn8u9AAAAAA"] [Sat Feb 21 18:34:35.711398 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static_root/.env"] [unique_id "aZm0a3rZ_c8LouBrYfy92QAAAAU"] [Sat Feb 21 18:34:36.718291 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static_root/.env"] [unique_id "aZm0bDgyub9jMIOPIArz0wAAAAc"] [Sat Feb 21 18:34:37.990415 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/static_user/.env"] [unique_id "aZm0bWxG-ZG_tIvrf97pPwAAAAM"] [Sat Feb 21 18:34:38.905468 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:34:38.960953 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /static_user/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/static_user/.env"] [unique_id "aZm0blAuKWjBndpBvNwbLQAAAAQ"] [Sat Feb 21 18:34:40.196894 2026] [security2:error] [pid 2190981:tid 2190981] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staticfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/staticfiles/.env"] [unique_id "aZm0cHrZ_c8LouBrYfy92wAAAAU"] [Sat Feb 21 18:34:41.197672 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /staticfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/staticfiles/.env"] [unique_id "aZm0cVAuKWjBndpBvNwbLgAAAAQ"] [Sat Feb 21 18:34:42.451722 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/stats/.env"] [unique_id "aZm0cnpA9eipntFQcueD4gAAABI"] [Sat Feb 21 18:34:43.312587 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stats/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/stats/.env"] [unique_id "aZm0czgyub9jMIOPIArz1wAAAAc"] [Sat Feb 21 18:34:44.598143 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/storage/.env"] [unique_id "aZm0dHMi1barCLgbQ6H0twAAAAY"] [Sat Feb 21 18:34:45.495447 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/storage/.env"] [unique_id "aZm0dTgyub9jMIOPIArz2AAAAAc"] [Sat Feb 21 18:34:46.799806 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/storage/.env.local"] [unique_id "aZm0dppe9KOFdAtIQx5qbgAAAAw"] [Sat Feb 21 18:34:47.692175 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /storage/.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/storage/.env.local"] [unique_id "aZm0d9Oijfkh7MgiTAtjpAAAAAg"] [Sat Feb 21 18:34:51.336696 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /strapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/strapi/.env"] [unique_id "aZm0e1MqSo7iS-0AaIsYegAAABM"] [Sat Feb 21 18:34:52.299868 2026] [security2:error] [pid 2203361:tid 2203361] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /strapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/strapi/.env"] [unique_id "aZm0fJYwa7au7xLd9Ha2-wAAAAo"] [Sat Feb 21 18:34:53.265406 2026] [security2:error] [pid 2190981:tid 2190981] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZm0e3rZ_c8LouBrYfy94AAAAAU"] [Sat Feb 21 18:34:53.265471 2026] [security2:error] [pid 2190981:tid 2190981] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZm0e3rZ_c8LouBrYfy94AAAAAU"] [Sat Feb 21 18:34:53.691365 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /style/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/style/.env"] [unique_id "aZm0fU-1x314J6ndw4NzGQAAAAI"] [Sat Feb 21 18:34:54.621766 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /style/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/style/.env"] [unique_id "aZm0fnMi1barCLgbQ6H0vgAAAAY"] [Sat Feb 21 18:34:55.923191 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:34:55.992142 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /styles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/styles/.env"] [unique_id "aZm0f0-1x314J6ndw4NzGgAAAAI"] [Sat Feb 21 18:34:56.871839 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm0f0-1x314J6ndw4NzGgAAAAI"] [Sat Feb 21 18:34:56.871918 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm0f0-1x314J6ndw4NzGgAAAAI"] [Sat Feb 21 18:34:56.918091 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /styles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/styles/.env"] [unique_id "aZm0gNOijfkh7MgiTAtjqAAAAAg"] [Sat Feb 21 18:34:58.510043 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stylesheets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/stylesheets/.env"] [unique_id "aZm0gnMi1barCLgbQ6H0wAAAAAY"] [Sat Feb 21 18:34:59.339784 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /stylesheets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/stylesheets/.env"] [unique_id "aZm0g2xG-ZG_tIvrf97pSQAAAAM"] [Sat Feb 21 18:35:01.432021 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-global": Permission denied [hostname "noorroknasateer.com"] [uri "/f5.php"] [unique_id "aZm0hVAuKWjBndpBvNwbOAAAAAQ"] [Sat Feb 21 18:35:01.432088 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.236.39:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/roknasateer-ip": Permission denied [hostname "noorroknasateer.com"] [uri "/f5.php"] [unique_id "aZm0hVAuKWjBndpBvNwbOAAAAAQ"] [Sat Feb 21 18:35:04.069695 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/symfony/.env"] [unique_id "aZm0iLhH1gqZ3dYvDyhXFwAAAAE"] [Sat Feb 21 18:35:05.093257 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /symfony/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/symfony/.env"] [unique_id "aZm0idOijfkh7MgiTAtjrQAAAAg"] [Sat Feb 21 18:35:06.824518 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system-config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/system-config/.env"] [unique_id "aZm0ik-1x314J6ndw4NzHwAAAAI"] [Sat Feb 21 18:35:07.925035 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system-config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/system-config/.env"] [unique_id "aZm0i1AuKWjBndpBvNwbOwAAAAQ"] [Sat Feb 21 18:35:09.432492 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/system/.env"] [unique_id "aZm0jWxG-ZG_tIvrf97pTQAAAAM"] [Sat Feb 21 18:35:10.481635 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/system/.env"] [unique_id "aZm0jlAuKWjBndpBvNwbPAAAAAQ"] [Sat Feb 21 18:35:14.001644 2026] [security2:error] [pid 2203361:tid 2203361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0kZYwa7au7xLd9Ha3CQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 18:35:14.001725 2026] [security2:error] [pid 2203361:tid 2203361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0kZYwa7au7xLd9Ha3CQAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 18:35:17.060095 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /target/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/target/.env"] [unique_id "aZm0lXpA9eipntFQcueD9QAAABI"] [Sat Feb 21 18:35:17.972756 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /target/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/target/.env"] [unique_id "aZm0lc1oL3kMBEDxMn8vDAAAAAA"] [Sat Feb 21 18:35:19.358734 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr10/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/temanr10/.env"] [unique_id "aZm0l3pA9eipntFQcueD9gAAABI"] [Sat Feb 21 18:35:20.370277 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr10/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/temanr10/.env"] [unique_id "aZm0mNOijfkh7MgiTAtjtQAAAAg"] [Sat Feb 21 18:35:22.017066 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr9/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/temanr9/.env"] [unique_id "aZm0mnpA9eipntFQcueD9wAAABI"] [Sat Feb 21 18:35:22.976905 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temanr9/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/temanr9/.env"] [unique_id "aZm0ms1oL3kMBEDxMn8vDgAAAAA"] [Sat Feb 21 18:35:23.646323 2026] [authz_core:error] [pid 2190249:tid 2190249] [client 104.46.236.39:0] AH01630: client denied by server configuration: /home/roknasateer/public_html/wp-includes/SimplePie/error_log [Sat Feb 21 18:35:26.959308 2026] [security2:error] [pid 2203361:tid 2203361] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/temp/.env"] [unique_id "aZm0npYwa7au7xLd9Ha3EwAAAAo"] [Sat Feb 21 18:35:28.417156 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /temp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/temp/.env"] [unique_id "aZm0oDgyub9jMIOPIArz7QAAAAc"] [Sat Feb 21 18:35:29.932487 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/template/.env"] [unique_id "aZm0odOijfkh7MgiTAtjuQAAAAg"] [Sat Feb 21 18:35:30.960434 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /template/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/template/.env"] [unique_id "aZm0ojgyub9jMIOPIArz7gAAAAc"] [Sat Feb 21 18:35:32.502375 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /templates/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/templates/.env"] [unique_id "aZm0pHMi1barCLgbQ6H01AAAAAY"] [Sat Feb 21 18:35:33.443445 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /templates/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/templates/.env"] [unique_id "aZm0pWxG-ZG_tIvrf97pWgAAAAM"] [Sat Feb 21 18:35:39.535621 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test-network/.env"] [unique_id "aZm0q0-1x314J6ndw4NzMgAAAAI"] [Sat Feb 21 18:35:40.425172 2026] [security2:error] [pid 2203361:tid 2203361] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test-network/.env"] [unique_id "aZm0rJYwa7au7xLd9Ha3GwAAAAo"] [Sat Feb 21 18:35:41.413859 2026] [security2:error] [pid 2202872:tid 2202872] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/.well-known/acme-challenge/"] [unique_id "aZm0rU-1x314J6ndw4NzMwAAAAI"] [Sat Feb 21 18:35:41.413929 2026] [security2:error] [pid 2202872:tid 2202872] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/.well-known/acme-challenge/"] [unique_id "aZm0rU-1x314J6ndw4NzMwAAAAI"] [Sat Feb 21 18:35:42.002165 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/addorg3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test-network/addOrg3/.env"] [unique_id "aZm0rlMqSo7iS-0AaIsYkwAAABM"] [Sat Feb 21 18:35:43.016475 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test-network/addorg3/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test-network/addOrg3/.env"] [unique_id "aZm0r7hH1gqZ3dYvDyhXMgAAAAE"] [Sat Feb 21 18:35:46.429416 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:35:46.964773 2026] [security2:error] [pid 2190250:tid 2190250] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZm0sFMqSo7iS-0AaIsYlQAAABM"] [Sat Feb 21 18:35:46.964895 2026] [security2:error] [pid 2190250:tid 2190250] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZm0sFMqSo7iS-0AaIsYlQAAABM"] [Sat Feb 21 18:35:47.200664 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/aries-js-worker/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "aZm0s7hH1gqZ3dYvDyhXNQAAAAE"] [Sat Feb 21 18:35:48.233969 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/aries-js-worker/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "aZm0tM1oL3kMBEDxMn8vGwAAAAA"] [Sat Feb 21 18:35:49.587104 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/adapter-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/adapter-rest/.env"] [unique_id "aZm0tZpe9KOFdAtIQx5qkAAAAAw"] [Sat Feb 21 18:35:50.519593 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/adapter-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/adapter-rest/.env"] [unique_id "aZm0trhH1gqZ3dYvDyhXNwAAAAE"] [Sat Feb 21 18:35:51.910365 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/agent-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "aZm0t81oL3kMBEDxMn8vHQAAAAA"] [Sat Feb 21 18:35:52.927217 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/agent-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "aZm0uJpe9KOFdAtIQx5qkgAAAAw"] [Sat Feb 21 18:35:54.352757 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/couchdb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/couchdb/.env"] [unique_id "aZm0urhH1gqZ3dYvDyhXOQAAAAE"] [Sat Feb 21 18:35:55.314676 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/couchdb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/couchdb/.env"] [unique_id "aZm0u3Mi1barCLgbQ6H04gAAAAY"] [Sat Feb 21 18:35:56.426160 2026] [security2:error] [pid 2195998:tid 2195998] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/wp-includes/assets/"] [unique_id "aZm0vLhH1gqZ3dYvDyhXOgAAAAE"] [Sat Feb 21 18:35:56.426208 2026] [security2:error] [pid 2195998:tid 2195998] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/wp-includes/assets/"] [unique_id "aZm0vLhH1gqZ3dYvDyhXOgAAAAE"] [Sat Feb 21 18:35:56.737937 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/demo/.env"] [unique_id "aZm0vFMqSo7iS-0AaIsYnAAAABM"] [Sat Feb 21 18:35:57.782854 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/demo/.env"] [unique_id "aZm0vXMi1barCLgbQ6H04wAAAAY"] [Sat Feb 21 18:35:59.264180 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/openapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "aZm0v1MqSo7iS-0AaIsYnQAAABM"] [Sat Feb 21 18:36:00.235541 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/demo/openapi/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "aZm0wDgyub9jMIOPIArz_QAAAAc"] [Sat Feb 21 18:36:02.007747 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-method-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/did-method-rest/.env"] [unique_id "aZm0wnMi1barCLgbQ6H05QAAAAY"] [Sat Feb 21 18:36:03.387990 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-method-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/did-method-rest/.env"] [unique_id "aZm0wzgyub9jMIOPIArz_gAAAAc"] [Sat Feb 21 18:36:05.329906 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "aZm0xc1oL3kMBEDxMn8vJgAAAAA"] [Sat Feb 21 18:36:06.442641 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm0xc1oL3kMBEDxMn8vJgAAAAA"] [Sat Feb 21 18:36:06.442739 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm0xc1oL3kMBEDxMn8vJgAAAAA"] [Sat Feb 21 18:36:06.520168 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/did-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "aZm0xtOijfkh7MgiTAtjzwAAAAg"] [Sat Feb 21 18:36:08.236611 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/edv-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/edv-rest/.env"] [unique_id "aZm0yHpA9eipntFQcueEEgAAABI"] [Sat Feb 21 18:36:09.409663 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/edv-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/edv-rest/.env"] [unique_id "aZm0yVMqSo7iS-0AaIsYoQAAABM"] [Sat Feb 21 18:36:10.883648 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/openapi-demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/openapi-demo/.env"] [unique_id "aZm0yppe9KOFdAtIQx5qmgAAAAw"] [Sat Feb 21 18:36:11.824839 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/openapi-demo/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/openapi-demo/.env"] [unique_id "aZm0y3pA9eipntFQcueEFAAAABI"] [Sat Feb 21 18:36:13.451739 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm0y3pA9eipntFQcueEFAAAABI"] [Sat Feb 21 18:36:13.451811 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm0y3pA9eipntFQcueEFAAAABI"] [Sat Feb 21 18:36:13.534457 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/sidetree-mock/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "aZm0zTgyub9jMIOPIAr0BAAAAAc"] [Sat Feb 21 18:36:14.479722 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/sidetree-mock/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/sidetree-mock/.env"] [unique_id "aZm0ztOijfkh7MgiTAtj0wAAAAg"] [Sat Feb 21 18:36:15.883967 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/universalresolver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/universalresolver/.env"] [unique_id "aZm0z3Mi1barCLgbQ6H07QAAAAY"] [Sat Feb 21 18:36:16.779534 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/universalresolver/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/universalresolver/.env"] [unique_id "aZm00NOijfkh7MgiTAtj1AAAAAg"] [Sat Feb 21 18:36:17.532009 2026] [security2:error] [pid 2202872:tid 2202872] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-global": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZm00E-1x314J6ndw4NzRwAAAAI"] [Sat Feb 21 18:36:17.532102 2026] [security2:error] [pid 2202872:tid 2202872] [client 4.232.89.175:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/medimen-ip": Permission denied [hostname "medimen.ca"] [uri "/index.php"] [unique_id "aZm00E-1x314J6ndw4NzRwAAAAI"] [Sat Feb 21 18:36:18.250329 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/vc-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/bdd/fixtures/vc-rest/.env"] [unique_id "aZm00k-1x314J6ndw4NzSAAAAAI"] [Sat Feb 21 18:36:19.185696 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/bdd/fixtures/vc-rest/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/bdd/fixtures/vc-rest/.env"] [unique_id "aZm007hH1gqZ3dYvDyhXSQAAAAE"] [Sat Feb 21 18:36:20.530805 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/fixtures/.env"] [unique_id "aZm01HMi1barCLgbQ6H07wAAAAY"] [Sat Feb 21 18:36:21.554165 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/fixtures/.env"] [unique_id "aZm01Tgyub9jMIOPIAr0CQAAAAc"] [Sat Feb 21 18:36:22.984952 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/fixtures/app_types/node/.env"] [unique_id "aZm01nMi1barCLgbQ6H08AAAAAY"] [Sat Feb 21 18:36:23.920491 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/node/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/fixtures/app_types/node/.env"] [unique_id "aZm010-1x314J6ndw4NzSwAAAAI"] [Sat Feb 21 18:36:25.295604 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZm02XMi1barCLgbQ6H08QAAAAY"] [Sat Feb 21 18:36:26.164916 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/app_types/rails/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/fixtures/app_types/rails/.env"] [unique_id "aZm02k-1x314J6ndw4NzTAAAAAI"] [Sat Feb 21 18:36:27.486685 2026] [security2:error] [pid 2190227:tid 2190227] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/node_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/fixtures/node_path/.env"] [unique_id "aZm022xG-ZG_tIvrf97pfgAAAAM"] [Sat Feb 21 18:36:28.492007 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/fixtures/node_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/fixtures/node_path/.env"] [unique_id "aZm03OzO4t90cpHbdKFOlQAAAAU"] [Sat Feb 21 18:36:29.993500 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/integration/env-config/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/test/integration/env-config/app/.env"] [unique_id "aZm03bhH1gqZ3dYvDyhXTgAAAAE"] [Sat Feb 21 18:36:30.788402 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm03lAuKWjBndpBvNwbaQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 18:36:30.788503 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm03lAuKWjBndpBvNwbaQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 18:36:31.012360 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /test/integration/env-config/app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/test/integration/env-config/app/.env"] [unique_id "aZm033Mi1barCLgbQ6H09AAAAAY"] [Sat Feb 21 18:36:34.959643 2026] [security2:error] [pid 2204873:tid 2204873] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm04uzO4t90cpHbdKFOmAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0 [Sat Feb 21 18:36:34.959737 2026] [security2:error] [pid 2204873:tid 2204873] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm04uzO4t90cpHbdKFOmAAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0 [Sat Feb 21 18:36:38.396188 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm05k-1x314J6ndw4NzVAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:36:38.396264 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm05k-1x314J6ndw4NzVAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:36:57.010770 2026] [core:error] [pid 2202872:tid 2202872] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:57.010918 2026] [core:error] [pid 2202872:tid 2202872] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:57.030490 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 20.111.44.121:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 18:36:57.033873 2026] [core:error] [pid 2191386:tid 2191386] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:57.053522 2026] [access_compat:error] [pid 2204873:tid 2204873] [client 20.111.44.121:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sc.php [Sat Feb 21 18:36:57.054897 2026] [core:error] [pid 2204873:tid 2204873] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:57.076848 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.111.44.121:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/ioxi-o.php [Sat Feb 21 18:36:57.080419 2026] [core:error] [pid 2118467:tid 2118467] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:57.102231 2026] [core:error] [pid 2201885:tid 2201885] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:57.102287 2026] [core:error] [pid 2201885:tid 2201885] [client 20.111.44.121:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:36:59.600020 2026] [security2:error] [pid 2191386:tid 2191386] [client 20.89.58.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "www.bright-baby.net"] [uri "/index.php"] [unique_id "aZm0-jgyub9jMIOPIAr0HgAAAAc"] [Sat Feb 21 18:36:59.600111 2026] [security2:error] [pid 2191386:tid 2191386] [client 20.89.58.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "www.bright-baby.net"] [uri "/index.php"] [unique_id "aZm0-jgyub9jMIOPIAr0HgAAAAc"] [Sat Feb 21 18:37:02.166268 2026] [security2:error] [pid 2203361:tid 2203361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0_pYwa7au7xLd9Ha3RgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem [Sat Feb 21 18:37:02.166356 2026] [security2:error] [pid 2203361:tid 2203361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm0_pYwa7au7xLd9Ha3RgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda1%2Fsubsystem [Sat Feb 21 18:37:26.472911 2026] [cgi:error] [pid 2202872:tid 2202872] [client 20.89.58.48:0] AH02812: stderr from /home/brightbaby/public_html/cgi-bin/: attempt to invoke directory as script [Sat Feb 21 18:37:28.234598 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1Fzgyub9jMIOPIAr0LQAAAAc"] [Sat Feb 21 18:37:28.234668 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1Fzgyub9jMIOPIAr0LQAAAAc"] [Sat Feb 21 18:37:41.215763 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:37:48.478492 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/testfiles/.env"] [unique_id "aZm1LM1oL3kMBEDxMn8vYwAAAAA"] [Sat Feb 21 18:37:49.409257 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/testfiles/.env"] [unique_id "aZm1LXMi1barCLgbQ6H1FwAAAAY"] [Sat Feb 21 18:37:49.794387 2026] [security2:error] [pid 2203361:tid 2203361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1LZYwa7au7xLd9Ha3YgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:37:49.794442 2026] [security2:error] [pid 2203361:tid 2203361] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1LZYwa7au7xLd9Ha3YgAAAAo"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:37:54.087321 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1MVMqSo7iS-0AaIsY2AAAABM"] [Sat Feb 21 18:37:54.087588 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1MVMqSo7iS-0AaIsY2AAAABM"] [Sat Feb 21 18:37:55.561617 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/testing/.env"] [unique_id "aZm1Mzgyub9jMIOPIAr0PQAAAAc"] [Sat Feb 21 18:37:56.487699 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/testing/.env"] [unique_id "aZm1NFAuKWjBndpBvNwbnAAAAAQ"] [Sat Feb 21 18:37:57.789571 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/testing/docker/.env"] [unique_id "aZm1NVMqSo7iS-0AaIsY2wAAABM"] [Sat Feb 21 18:37:58.717291 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testing/docker/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/testing/docker/.env"] [unique_id "aZm1NtOijfkh7MgiTAtkCwAAAAg"] [Sat Feb 21 18:38:00.134386 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/.env"] [unique_id "aZm1OE-1x314J6ndw4NzgwAAAAI"] [Sat Feb 21 18:38:01.204909 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/.env"] [unique_id "aZm1OezO4t90cpHbdKFOzQAAAAU"] [Sat Feb 21 18:38:01.435147 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1OZpe9KOFdAtIQx5q2gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:38:01.435311 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1OZpe9KOFdAtIQx5q2gAAAAw"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0 [Sat Feb 21 18:38:02.852591 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Tests/Application/.env"] [unique_id "aZm1OlMqSo7iS-0AaIsY3gAAABM"] [Sat Feb 21 18:38:03.978576 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Tests/Application/.env"] [unique_id "aZm1O7hH1gqZ3dYvDyhXgQAAAAE"] [Sat Feb 21 18:38:05.595255 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v10.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aZm1PVAuKWjBndpBvNwbogAAAAQ"] [Sat Feb 21 18:38:06.558446 2026] [security2:error] [pid 2203361:tid 2203361] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v10.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aZm1PpYwa7au7xLd9Ha3bgAAAAo"] [Sat Feb 21 18:38:08.010859 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v11.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v11.0/.env"] [unique_id "aZm1QOzO4t90cpHbdKFO0gAAAAU"] [Sat Feb 21 18:38:08.999164 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v11.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v11.0/.env"] [unique_id "aZm1QLhH1gqZ3dYvDyhXhAAAAAE"] [Sat Feb 21 18:38:10.943745 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v12.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v12.0/.env"] [unique_id "aZm1QuPsi4YomzVN4stwIAAAAAk"] [Sat Feb 21 18:38:11.925740 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v12.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v12.0/.env"] [unique_id "aZm1Q-zO4t90cpHbdKFO1gAAAAU"] [Sat Feb 21 18:38:13.283192 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v13.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v13.0/.env"] [unique_id "aZm1Rc1oL3kMBEDxMn8vcwAAAAA"] [Sat Feb 21 18:38:14.295197 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v13.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v13.0/.env"] [unique_id "aZm1RlAuKWjBndpBvNwbqwAAAAQ"] [Sat Feb 21 18:38:15.651239 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v7.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v7.0/.env"] [unique_id "aZm1R-Psi4YomzVN4stwIwAAAAk"] [Sat Feb 21 18:38:16.208474 2026] [security2:error] [pid 2203361:tid 2203361] [client 20.100.193.95:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-global": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZm1RpYwa7au7xLd9Ha3dQAAAAo"] [Sat Feb 21 18:38:16.208533 2026] [security2:error] [pid 2203361:tid 2203361] [client 20.100.193.95:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/alliancechem-ip": Permission denied [hostname "alliancechem-eng.com"] [uri "/cgi-sys/ea-php83/index.php"] [unique_id "aZm1RpYwa7au7xLd9Ha3dQAAAAo"] [Sat Feb 21 18:38:16.544684 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v7.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v7.0/.env"] [unique_id "aZm1SM1oL3kMBEDxMn8vdgAAAAA"] [Sat Feb 21 18:38:17.930296 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v8.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v8.0/.env"] [unique_id "aZm1SdOijfkh7MgiTAtkGQAAAAg"] [Sat Feb 21 18:38:18.898362 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v8.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v8.0/.env"] [unique_id "aZm1SnpA9eipntFQcueEXwAAABI"] [Sat Feb 21 18:38:20.358305 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v9.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "aZm1TE-1x314J6ndw4NzkgAAAAI"] [Sat Feb 21 18:38:21.436829 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/default_settings/v9.0/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "aZm1TTgyub9jMIOPIAr0UgAAAAc"] [Sat Feb 21 18:38:22.928473 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/drupal-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/drupal-test/.env"] [unique_id "aZm1Tk-1x314J6ndw4NzlAAAAAI"] [Sat Feb 21 18:38:23.124797 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:38:23.902837 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/drupal-test/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/drupal-test/.env"] [unique_id "aZm1T-Psi4YomzVN4stwKgAAAAk"] [Sat Feb 21 18:38:25.326343 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/integration/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZm1UZpe9KOFdAtIQx5q6wAAAAw"] [Sat Feb 21 18:38:26.158582 2026] [security2:error] [pid 2191386:tid 2191386] [client 91.92.243.250:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZm1Tzgyub9jMIOPIAr0UwAAAAc"] [Sat Feb 21 18:38:26.158674 2026] [security2:error] [pid 2191386:tid 2191386] [client 91.92.243.250:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZm1Tzgyub9jMIOPIAr0UwAAAAc"] [Sat Feb 21 18:38:26.286500 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/integration/environment/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/Integration/Environment/.env"] [unique_id "aZm1Us1oL3kMBEDxMn8vfAAAAAA"] [Sat Feb 21 18:38:27.012574 2026] [security2:error] [pid 2204873:tid 2204873] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm1UezO4t90cpHbdKFO4AAAAAU"] [Sat Feb 21 18:38:27.012652 2026] [security2:error] [pid 2204873:tid 2204873] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm1UezO4t90cpHbdKFO4AAAAAU"] [Sat Feb 21 18:38:27.720584 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/todo-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tests/todo-react/.env"] [unique_id "aZm1U-zO4t90cpHbdKFO4QAAAAU"] [Sat Feb 21 18:38:28.584380 2026] [security2:error] [pid 2205753:tid 2205753] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tests/todo-react/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tests/todo-react/.env"] [unique_id "aZm1VGMJwUvcXPuGbBfkAAAAAAM"] [Sat Feb 21 18:38:29.920748 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testwork_json/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/testwork_json/.env"] [unique_id "aZm1VXpA9eipntFQcueEaAAAABI"] [Sat Feb 21 18:38:30.877260 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /testwork_json/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/testwork_json/.env"] [unique_id "aZm1Vjgyub9jMIOPIAr0VwAAAAc"] [Sat Feb 21 18:38:32.337442 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/theme/.env"] [unique_id "aZm1WDgyub9jMIOPIAr0WAAAAAc"] [Sat Feb 21 18:38:33.432395 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/theme/.env"] [unique_id "aZm1WXpA9eipntFQcueEagAAABI"] [Sat Feb 21 18:38:34.842362 2026] [security2:error] [pid 2205753:tid 2205753] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/theme_static/.env"] [unique_id "aZm1WmMJwUvcXPuGbBfkBgAAAAM"] [Sat Feb 21 18:38:36.006325 2026] [security2:error] [pid 2195998:tid 2195998] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /theme_static/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/theme_static/.env"] [unique_id "aZm1XLhH1gqZ3dYvDyhXmQAAAAE"] [Sat Feb 21 18:38:37.704101 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/thumb/.env"] [unique_id "aZm1XU-1x314J6ndw4NzngAAAAI"] [Sat Feb 21 18:38:38.749884 2026] [security2:error] [pid 2197177:tid 2197177] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumb/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/thumb/.env"] [unique_id "aZm1XtOijfkh7MgiTAtkKwAAAAg"] [Sat Feb 21 18:38:39.079944 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1Xs1oL3kMBEDxMn8vhAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:38:39.080034 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1Xs1oL3kMBEDxMn8vhAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:38:41.318349 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumbs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/thumbs/.env"] [unique_id "aZm1YXpA9eipntFQcueEcgAAABI"] [Sat Feb 21 18:38:42.432303 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /thumbs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/thumbs/.env"] [unique_id "aZm1YlMqSo7iS-0AaIsY_AAAABM"] [Sat Feb 21 18:38:43.937167 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tiedostot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tiedostot/.env"] [unique_id "aZm1Y1AuKWjBndpBvNwbxgAAAAQ"] [Sat Feb 21 18:38:44.879624 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tiedostot/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tiedostot/.env"] [unique_id "aZm1ZM1oL3kMBEDxMn8viAAAAAA"] [Sat Feb 21 18:38:45.304272 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:38:45.779380 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1ZVMqSo7iS-0AaIsY_gAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:38:45.779478 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1ZVMqSo7iS-0AaIsY_gAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:38:46.151361 2026] [security2:error] [pid 2202872:tid 2202872] [client 49.235.136.28:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZm1ZU-1x314J6ndw4NzowAAAAI"] [Sat Feb 21 18:38:46.151423 2026] [security2:error] [pid 2202872:tid 2202872] [client 49.235.136.28:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZm1ZU-1x314J6ndw4NzowAAAAI"] [Sat Feb 21 18:38:48.567654 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tmp/.env"] [unique_id "aZm1aHpA9eipntFQcueEdwAAABI"] [Sat Feb 21 18:38:49.465696 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tmp/.env"] [unique_id "aZm1aU-1x314J6ndw4NzpQAAAAI"] [Sat Feb 21 18:38:50.805570 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tmp/config/.env"] [unique_id "aZm1auPsi4YomzVN4stwOQAAAAk"] [Sat Feb 21 18:38:51.310570 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:38:51.700236 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1auPsi4YomzVN4stwOQAAAAk"] [Sat Feb 21 18:38:51.700288 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1auPsi4YomzVN4stwOQAAAAk"] [Sat Feb 21 18:38:51.754598 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tmp/config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tmp/config/.env"] [unique_id "aZm1a5pe9KOFdAtIQx5q-AAAAAw"] [Sat Feb 21 18:38:56.274845 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1cFMqSo7iS-0AaIsZBwAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 18:38:56.274951 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1cFMqSo7iS-0AaIsZBwAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 18:38:59.318495 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:38:59.980278 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/tools/.env"] [unique_id "aZm1c0-1x314J6ndw4NzrQAAAAI"] [Sat Feb 21 18:39:01.049946 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /tools/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/tools/.env"] [unique_id "aZm1dXMi1barCLgbQ6H1RgAAAAY"] [Sat Feb 21 18:39:03.019062 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Travel_form/.env"] [unique_id "aZm1d81oL3kMBEDxMn8vlAAAAAA"] [Sat Feb 21 18:39:03.978240 2026] [security2:error] [pid 2205753:tid 2205753] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /travel_form/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Travel_form/.env"] [unique_id "aZm1d2MJwUvcXPuGbBfkGwAAAAM"] [Sat Feb 21 18:39:05.323670 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ts/prime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ts/prime/.env"] [unique_id "aZm1eTgyub9jMIOPIAr0cQAAAAc"] [Sat Feb 21 18:39:06.289056 2026] [security2:error] [pid 2205753:tid 2205753] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ts/prime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ts/prime/.env"] [unique_id "aZm1emMJwUvcXPuGbBfkHAAAAAM"] [Sat Feb 21 18:39:12.641582 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ubuntu/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ubuntu/.env"] [unique_id "aZm1gDgyub9jMIOPIAr0dgAAAAc"] [Sat Feb 21 18:39:13.599179 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ubuntu/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ubuntu/.env"] [unique_id "aZm1gQZjKw2rGmSiIPuPCwAAAAs"] [Sat Feb 21 18:39:15.016128 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/ui/.env"] [unique_id "aZm1g3Mi1barCLgbQ6H1UAAAAAY"] [Sat Feb 21 18:39:15.959248 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /ui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/ui/.env"] [unique_id "aZm1g-Psi4YomzVN4stwSQAAAAk"] [Sat Feb 21 18:39:17.556613 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unixtime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/unixtime/.env"] [unique_id "aZm1hU-1x314J6ndw4NzuAAAAAI"] [Sat Feb 21 18:39:18.514512 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unixtime/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/unixtime/.env"] [unique_id "aZm1hppe9KOFdAtIQx5rBQAAAAw"] [Sat Feb 21 18:39:19.859148 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unsplash-downloader/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/unsplash-downloader/.env"] [unique_id "aZm1h1AuKWjBndpBvNwb3gAAAAQ"] [Sat Feb 21 18:39:20.776406 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /unsplash-downloader/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/unsplash-downloader/.env"] [unique_id "aZm1iOzO4t90cpHbdKFPAgAAAAU"] [Sat Feb 21 18:39:24.417607 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/upfiles/.env"] [unique_id "aZm1jFMqSo7iS-0AaIsZGgAAABM"] [Sat Feb 21 18:39:24.981276 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:39:25.397571 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upfiles/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/upfiles/.env"] [unique_id "aZm1jZpe9KOFdAtIQx5rCgAAAAw"] [Sat Feb 21 18:39:25.900068 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1jVMqSo7iS-0AaIsZGwAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 18:39:25.900141 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1jVMqSo7iS-0AaIsZGwAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A0%2Fpower [Sat Feb 21 18:39:26.724397 2026] [security2:error] [pid 2191386:tid 2191386] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upload/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/upload/.env"] [unique_id "aZm1jjgyub9jMIOPIAr0fgAAAAc"] [Sat Feb 21 18:39:27.640188 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /upload/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/upload/.env"] [unique_id "aZm1j1AuKWjBndpBvNwb4gAAAAQ"] [Sat Feb 21 18:39:28.370545 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:39:29.032805 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/uploads/.env"] [unique_id "aZm1kePsi4YomzVN4stwUQAAAAk"] [Sat Feb 21 18:39:29.644520 2026] [security2:error] [pid 2206258:tid 2206258] [client 20.89.58.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZm1kMs1_osLxUPcXL41DgAAAAE"] [Sat Feb 21 18:39:29.644607 2026] [security2:error] [pid 2206258:tid 2206258] [client 20.89.58.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZm1kMs1_osLxUPcXL41DgAAAAE"] [Sat Feb 21 18:39:29.980634 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /uploads/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/uploads/.env"] [unique_id "aZm1kVAuKWjBndpBvNwb4wAAAAQ"] [Sat Feb 21 18:39:31.352321 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /urlmem-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/urlmem-app/.env"] [unique_id "aZm1k-Psi4YomzVN4stwUgAAAAk"] [Sat Feb 21 18:39:32.357725 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /urlmem-app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/urlmem-app/.env"] [unique_id "aZm1lM1oL3kMBEDxMn8vpAAAAAA"] [Sat Feb 21 18:39:32.741023 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1lAZjKw2rGmSiIPuPFgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:39:32.741436 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1lAZjKw2rGmSiIPuPFgAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:39:33.324829 2026] [access_compat:error] [pid 2191386:tid 2191386] [client 66.249.79.201:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 18:39:34.010623 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/user/.env.staging"] [unique_id "aZm1llMqSo7iS-0AaIsZIQAAABM"] [Sat Feb 21 18:39:34.942105 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user/.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/user/.env.staging"] [unique_id "aZm1lk-1x314J6ndw4NzwQAAAAI"] [Sat Feb 21 18:39:38.543931 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/User_info/.env"] [unique_id "aZm1mlAuKWjBndpBvNwb5wAAAAQ"] [Sat Feb 21 18:39:39.383132 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /user_info/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/User_info/.env"] [unique_id "aZm1m1MqSo7iS-0AaIsZJAAAABM"] [Sat Feb 21 18:39:40.408997 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1nOPsi4YomzVN4stwWAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric [Sat Feb 21 18:39:40.409381 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1nOPsi4YomzVN4stwWAAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric [Sat Feb 21 18:39:40.673137 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/v1/.env"] [unique_id "aZm1nHMi1barCLgbQ6H1XwAAAAY"] [Sat Feb 21 18:39:41.473885 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v1/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/v1/.env"] [unique_id "aZm1nQZjKw2rGmSiIPuPHAAAAAs"] [Sat Feb 21 18:39:44.389149 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:39:49.890355 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/v2/.env"] [unique_id "aZm1pZpe9KOFdAtIQx5rGAAAAAw"] [Sat Feb 21 18:39:49.967430 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1pc1oL3kMBEDxMn8vqwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 18:39:49.967511 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm1pc1oL3kMBEDxMn8vqwAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 18:39:50.836086 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /v2/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/v2/.env"] [unique_id "aZm1pgZjKw2rGmSiIPuPIQAAAAs"] [Sat Feb 21 18:39:52.209692 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/var/backup/.env"] [unique_id "aZm1qOzO4t90cpHbdKFPFAAAAAU"] [Sat Feb 21 18:39:53.226587 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /var/backup/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/var/backup/.env"] [unique_id "aZm1qXpA9eipntFQcueEmwAAABI"] [Sat Feb 21 18:39:54.608540 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/.env"] [unique_id "aZm1qppe9KOFdAtIQx5rHAAAAAw"] [Sat Feb 21 18:39:55.493260 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/.env"] [unique_id "aZm1q1MqSo7iS-0AaIsZLwAAABM"] [Sat Feb 21 18:39:56.787839 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/gobuffalo/envy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/github.com/gobuffalo/envy/.env"] [unique_id "aZm1rJpe9KOFdAtIQx5rHgAAAAw"] [Sat Feb 21 18:39:57.668909 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/gobuffalo/envy/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/github.com/gobuffalo/envy/.env"] [unique_id "aZm1rXpA9eipntFQcueEnQAAABI"] [Sat Feb 21 18:39:59.205738 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/subosito/gotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/github.com/subosito/gotenv/.env"] [unique_id "aZm1r5pe9KOFdAtIQx5rHwAAAAw"] [Sat Feb 21 18:40:00.067660 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/github.com/subosito/gotenv/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/github.com/subosito/gotenv/.env"] [unique_id "aZm1sAZjKw2rGmSiIPuPJwAAAAs"] [Sat Feb 21 18:40:01.827748 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1sAZjKw2rGmSiIPuPJwAAAAs"] [Sat Feb 21 18:40:01.827813 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1sAZjKw2rGmSiIPuPJwAAAAs"] [Sat Feb 21 18:40:07.662806 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /videos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/videos/.env"] [unique_id "aZm1t3Mi1barCLgbQ6H1cQAAAAY"] [Sat Feb 21 18:40:08.782766 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /videos/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/videos/.env"] [unique_id "aZm1uAZjKw2rGmSiIPuPKgAAAAs"] [Sat Feb 21 18:40:12.709800 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vm-docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vm-docker-compose/.env"] [unique_id "aZm1vOPsi4YomzVN4stwZgAAAAk"] [Sat Feb 21 18:40:13.564412 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vm-docker-compose/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vm-docker-compose/.env"] [unique_id "aZm1vU-1x314J6ndw4Nz1QAAAAI"] [Sat Feb 21 18:40:14.875586 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vod_installer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vod_installer/.env"] [unique_id "aZm1vo_mF86VY-svYl0_1QAAAAM"] [Sat Feb 21 18:40:15.838714 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vod_installer/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vod_installer/.env"] [unique_id "aZm1v1AuKWjBndpBvNwb-wAAAAQ"] [Sat Feb 21 18:40:17.253787 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue-end/vue-til/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vue-end/vue-til/.env"] [unique_id "aZm1wVMqSo7iS-0AaIsZOgAAABM"] [Sat Feb 21 18:40:18.218256 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue-end/vue-til/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vue-end/vue-til/.env"] [unique_id "aZm1wuzO4t90cpHbdKFPJgAAAAU"] [Sat Feb 21 18:40:19.766555 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vue/.env"] [unique_id "aZm1w5pe9KOFdAtIQx5rKgAAAAw"] [Sat Feb 21 18:40:20.770039 2026] [security2:error] [pid 2190249:tid 2190249] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vue/.env"] [unique_id "aZm1xHpA9eipntFQcueEqAAAABI"] [Sat Feb 21 18:40:22.162884 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/vuecli/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vue/vuecli/.env"] [unique_id "aZm1xppe9KOFdAtIQx5rKwAAAAw"] [Sat Feb 21 18:40:23.136632 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue/vuecli/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vue/vuecli/.env"] [unique_id "aZm1x4_mF86VY-svYl0_2gAAAAM"] [Sat Feb 21 18:40:24.584606 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue_crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vue_CRM/.env"] [unique_id "aZm1yJpe9KOFdAtIQx5rLAAAAAw"] [Sat Feb 21 18:40:25.481704 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vue_crm/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vue_CRM/.env"] [unique_id "aZm1yePsi4YomzVN4stwbQAAAAk"] [Sat Feb 21 18:40:26.513474 2026] [security2:error] [pid 2203202:tid 2203202] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm1yc1oL3kMBEDxMn8vvwAAAAA"] [Sat Feb 21 18:40:26.513567 2026] [security2:error] [pid 2203202:tid 2203202] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm1yc1oL3kMBEDxMn8vvwAAAAA"] [Sat Feb 21 18:40:26.671507 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1yePsi4YomzVN4stwbQAAAAk"] [Sat Feb 21 18:40:26.671581 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1yePsi4YomzVN4stwbQAAAAk"] [Sat Feb 21 18:40:29.095554 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web-dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/web-dist/.env"] [unique_id "aZm1zezO4t90cpHbdKFPKwAAAAU"] [Sat Feb 21 18:40:30.183166 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web-dist/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/web-dist/.env"] [unique_id "aZm1zgZjKw2rGmSiIPuPNQAAAAs"] [Sat Feb 21 18:40:31.465674 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1zgZjKw2rGmSiIPuPNQAAAAs"] [Sat Feb 21 18:40:31.465738 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm1zgZjKw2rGmSiIPuPNQAAAAs"] [Sat Feb 21 18:40:31.556157 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/web.config"] [unique_id "aZm1z0-1x314J6ndw4Nz4QAAAAI"] [Sat Feb 21 18:40:31.556730 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/web.config"] [unique_id "aZm1z0-1x314J6ndw4Nz4QAAAAI"] [Sat Feb 21 18:40:32.489764 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/web.config"] [unique_id "aZm10HMi1barCLgbQ6H1fQAAAAY"] [Sat Feb 21 18:40:32.490826 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/Web.config" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /Web.config found within REQUEST_FILENAME: /web.config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/web.config"] [unique_id "aZm10HMi1barCLgbQ6H1fQAAAAY"] [Sat Feb 21 18:40:35.925401 2026] [security2:error] [pid 2190249:tid 2190249] [client 40.115.138.121:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/private/"] [unique_id "aZm103pA9eipntFQcueEsgAAABI"] [Sat Feb 21 18:40:35.925447 2026] [security2:error] [pid 2190249:tid 2190249] [client 40.115.138.121:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "demo4.247reactionpower.com"] [uri "/private/"] [unique_id "aZm103pA9eipntFQcueEsgAAABI"] [Sat Feb 21 18:40:36.462651 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:40:38.952391 2026] [security2:error] [pid 2206258:tid 2206258] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/Web/siteMariage/.env"] [unique_id "aZm11ss1_osLxUPcXL41PQAAAAE"] [Sat Feb 21 18:40:39.853674 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /web/sitemariage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/Web/siteMariage/.env"] [unique_id "aZm11wZjKw2rGmSiIPuPPQAAAAs"] [Sat Feb 21 18:40:45.638244 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webroot_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/webroot_path/.env"] [unique_id "aZm13Y_mF86VY-svYl0_6wAAAAM"] [Sat Feb 21 18:40:46.189892 2026] [access_compat:error] [pid 2204873:tid 2204873] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:40:46.619403 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webroot_path/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/webroot_path/.env"] [unique_id "aZm13lMqSo7iS-0AaIsZTwAAABM"] [Sat Feb 21 18:40:47.535229 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:40:48.186106 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/website/.env"] [unique_id "aZm14E-1x314J6ndw4Nz7gAAAAI"] [Sat Feb 21 18:40:49.112505 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /website/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/website/.env"] [unique_id "aZm14Zpe9KOFdAtIQx5rQAAAAAw"] [Sat Feb 21 18:40:49.319686 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm14ePsi4YomzVN4stwfwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 18:40:49.319786 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm14ePsi4YomzVN4stwfwAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A2 [Sat Feb 21 18:40:50.687348 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /websocket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/websocket/.env"] [unique_id "aZm14lAuKWjBndpBvNwcFwAAAAQ"] [Sat Feb 21 18:40:51.610202 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /websocket/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/websocket/.env"] [unique_id "aZm1481oL3kMBEDxMn8v2AAAAAA"] [Sat Feb 21 18:40:52.878694 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webstatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/webstatic/.env"] [unique_id "aZm15OPsi4YomzVN4stwgwAAAAk"] [Sat Feb 21 18:40:53.749272 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webstatic/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/webstatic/.env"] [unique_id "aZm15VAuKWjBndpBvNwcGQAAAAQ"] [Sat Feb 21 18:40:55.012411 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/webui/.env"] [unique_id "aZm15-Psi4YomzVN4stwhAAAAAk"] [Sat Feb 21 18:40:55.815626 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /webui/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/webui/.env"] [unique_id "aZm155pe9KOFdAtIQx5rRQAAAAw"] [Sat Feb 21 18:40:57.123221 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/well-known/.env"] [unique_id "aZm16ePsi4YomzVN4stwhQAAAAk"] [Sat Feb 21 18:40:57.998529 2026] [security2:error] [pid 2206258:tid 2206258] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/well-known/.env"] [unique_id "aZm16cs1_osLxUPcXL41TgAAAAE"] [Sat Feb 21 18:40:59.454784 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /whturk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/whturk/.env"] [unique_id "aZm165pe9KOFdAtIQx5rRwAAAAw"] [Sat Feb 21 18:41:00.549886 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /whturk/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/whturk/.env"] [unique_id "aZm17E-1x314J6ndw4Nz-AAAAAI"] [Sat Feb 21 18:41:01.558448 2026] [security2:error] [pid 2206258:tid 2206258] [client 20.89.58.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-global": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZm17Ms1_osLxUPcXL41TwAAAAE"] [Sat Feb 21 18:41:01.558525 2026] [security2:error] [pid 2206258:tid 2206258] [client 20.89.58.48:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/brightbaby-ip": Permission denied [hostname "bright-baby.net"] [uri "/index.php"] [unique_id "aZm17Ms1_osLxUPcXL41TwAAAAE"] [Sat Feb 21 18:41:02.019013 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.2.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/windows/tests/9.2.x/.env"] [unique_id "aZm17lMqSo7iS-0AaIsZWgAAABM"] [Sat Feb 21 18:41:03.106946 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.2.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/windows/tests/9.2.x/.env"] [unique_id "aZm171AuKWjBndpBvNwcHgAAAAQ"] [Sat Feb 21 18:41:04.615064 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.3.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/windows/tests/9.3.x/.env"] [unique_id "aZm18OPsi4YomzVN4stwigAAAAk"] [Sat Feb 21 18:41:05.603469 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /windows/tests/9.3.x/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/windows/tests/9.3.x/.env"] [unique_id "aZm18c1oL3kMBEDxMn8v4AAAAAA"] [Sat Feb 21 18:41:07.040421 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wordpress/.env"] [unique_id "aZm181AuKWjBndpBvNwcIAAAAAQ"] [Sat Feb 21 18:41:07.957139 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wordpress/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wordpress/.env"] [unique_id "aZm184_mF86VY-svYl0_-QAAAAM"] [Sat Feb 21 18:41:09.257838 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /workspace/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/workspace/.env"] [unique_id "aZm19VMqSo7iS-0AaIsZXwAAABM"] [Sat Feb 21 18:41:10.281262 2026] [security2:error] [pid 2206258:tid 2206258] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /workspace/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/workspace/.env"] [unique_id "aZm19ss1_osLxUPcXL41VAAAAAE"] [Sat Feb 21 18:41:11.624258 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-config.old"] [unique_id "aZm194_mF86VY-svYl0_-wAAAAM"] [Sat Feb 21 18:41:11.624623 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.old"] [unique_id "aZm194_mF86VY-svYl0_-wAAAAM"] [Sat Feb 21 18:41:12.568703 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-config.old"] [unique_id "aZm1-OzO4t90cpHbdKFPSQAAAAU"] [Sat Feb 21 18:41:12.569291 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.old" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.old found within REQUEST_FILENAME: /wp-config.old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.old"] [unique_id "aZm1-OzO4t90cpHbdKFPSQAAAAU"] [Sat Feb 21 18:41:13.887425 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php-backup"] [unique_id "aZm1-Y_mF86VY-svYl0__AAAAAM"] [Sat Feb 21 18:41:15.061912 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php-backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.php-backup"] [unique_id "aZm1--zO4t90cpHbdKFPSgAAAAU"] [Sat Feb 21 18:41:16.311906 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php~"] [unique_id "aZm1_I_mF86VY-svYl0__QAAAAM"] [Sat Feb 21 18:41:17.118350 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.php~"] [unique_id "aZm1_ePsi4YomzVN4stwkwAAAAk"] [Sat Feb 21 18:41:18.343740 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.txt"] [unique_id "aZm1_o_mF86VY-svYl0__gAAAAM"] [Sat Feb 21 18:41:19.237399 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.txt"] [unique_id "aZm1_81oL3kMBEDxMn8v5wAAAAA"] [Sat Feb 21 18:41:20.693822 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-content/.env"] [unique_id "aZm2AOzO4t90cpHbdKFPTQAAAAU"] [Sat Feb 21 18:41:21.623069 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-content/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-content/.env"] [unique_id "aZm2AY_mF86VY-svYl1AAAAAAAM"] [Sat Feb 21 18:41:22.842135 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/debug.log"] [unique_id "aZm2Ak-1x314J6ndw4N0AwAAAAI"] [Sat Feb 21 18:41:23.676242 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/debug.log"] [unique_id "aZm2AwZjKw2rGmSiIPuPWgAAAAs"] [Sat Feb 21 18:41:25.724749 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp-login/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-login.php/.env"] [unique_id "aZm2BQZjKw2rGmSiIPuPWwAAAAs"] [Sat Feb 21 18:41:28.472037 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp/.env"] [unique_id "aZm2CI_mF86VY-svYl1AAwAAAAM"] [Sat Feb 21 18:41:29.263695 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /wp/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp/.env"] [unique_id "aZm2CVMqSo7iS-0AaIsZbAAAABM"] [Sat Feb 21 18:41:32.455867 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www-data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/www-data/.env"] [unique_id "aZm2DAZjKw2rGmSiIPuPXwAAAAs"] [Sat Feb 21 18:41:33.216494 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /www-data/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/www-data/.env"] [unique_id "aZm2DXMi1barCLgbQ6H1qwAAAAY"] [Sat Feb 21 18:41:35.888778 2026] [access_compat:error] [pid 2206258:tid 2206258] [client 66.249.79.201:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 18:41:36.818928 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xx-final/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/xx-final/vue-heroes/.env"] [unique_id "aZm2EFAuKWjBndpBvNwcKwAAAAQ"] [Sat Feb 21 18:41:37.583991 2026] [security2:error] [pid 2206258:tid 2206258] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /xx-final/vue-heroes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/xx-final/vue-heroes/.env"] [unique_id "aZm2Ecs1_osLxUPcXL41ZAAAAAE"] [Sat Feb 21 18:41:40.886986 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /zmusic-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/zmusic-frontend/.env"] [unique_id "aZm2FFAuKWjBndpBvNwcLQAAAAQ"] [Sat Feb 21 18:41:41.732950 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /zmusic-frontend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/zmusic-frontend/.env"] [unique_id "aZm2FezO4t90cpHbdKFPWgAAAAU"] [Sat Feb 21 18:41:41.940156 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2FY_mF86VY-svYl1ACgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:41:41.940308 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2FY_mF86VY-svYl1ACgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:41:42.878979 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/:443/.env"] [unique_id "aZm2FuPsi4YomzVN4stwnwAAAAk"] [Sat Feb 21 18:41:43.592260 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/:443/.env"] [unique_id "aZm2F4_mF86VY-svYl1ACwAAAAM"] [Sat Feb 21 18:41:44.937481 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:80/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/:80/.env"] [unique_id "aZm2GJpe9KOFdAtIQx5rZAAAAAw"] [Sat Feb 21 18:41:45.835924 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:80/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/:80/.env"] [unique_id "aZm2Gc1oL3kMBEDxMn8v-QAAAAA"] [Sat Feb 21 18:41:47.138445 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8080/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/:8080/.env"] [unique_id "aZm2G-zO4t90cpHbdKFPXQAAAAU"] [Sat Feb 21 18:41:47.906161 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8080/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/:8080/.env"] [unique_id "aZm2G4_mF86VY-svYl1ADQAAAAM"] [Sat Feb 21 18:41:49.193994 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8081/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/:8081/.env"] [unique_id "aZm2HU-1x314J6ndw4N0EgAAAAI"] [Sat Feb 21 18:41:50.117014 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8081/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/:8081/.env"] [unique_id "aZm2HnMi1barCLgbQ6H1swAAAAY"] [Sat Feb 21 18:41:51.406519 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm2HnMi1barCLgbQ6H1swAAAAY"] [Sat Feb 21 18:41:51.406615 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm2HnMi1barCLgbQ6H1swAAAAY"] [Sat Feb 21 18:41:51.479109 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/:8443/.env"] [unique_id "aZm2H0-1x314J6ndw4N0EwAAAAI"] [Sat Feb 21 18:41:52.271815 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /:8443/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/:8443/.env"] [unique_id "aZm2IJpe9KOFdAtIQx5raQAAAAw"] [Sat Feb 21 18:41:52.628847 2026] [security2:error] [pid 2206258:tid 2206258] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2IMs1_osLxUPcXL41awAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 18:41:52.628934 2026] [security2:error] [pid 2206258:tid 2206258] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2IMs1_osLxUPcXL41awAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 18:41:53.638774 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sendgrid_email/.env"] [unique_id "aZm2Ic1oL3kMBEDxMn8v_gAAAAA"] [Sat Feb 21 18:41:54.497732 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sendgrid_email/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sendgrid_email/.env"] [unique_id "aZm2IgZjKw2rGmSiIPuPawAAAAs"] [Sat Feb 21 18:41:55.762181 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.sendgrid"] [unique_id "aZm2I-zO4t90cpHbdKFPYQAAAAU"] [Sat Feb 21 18:41:56.557573 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sendgrid"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.sendgrid"] [unique_id "aZm2JJpe9KOFdAtIQx5rawAAAAw"] [Sat Feb 21 18:41:57.934771 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:42:00.560529 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:42:15.319020 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 18:42:15.319020 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/p.php [Sat Feb 21 18:42:15.319098 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 18:42:15.319111 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/plugins.php [Sat Feb 21 18:42:15.319206 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 18:42:15.319219 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce155.php [Sat Feb 21 18:42:15.319618 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 18:42:15.319626 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce235.php [Sat Feb 21 18:42:15.319717 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 18:42:15.319760 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 18:42:15.320143 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 18:42:15.320191 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 18:42:15.320231 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 18:42:15.320298 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 18:42:15.320406 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 18:42:15.320505 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 18:42:15.320539 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 18:42:15.320586 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 18:42:15.320611 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 18:42:15.320633 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 18:42:15.320846 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce321.php [Sat Feb 21 18:42:15.320894 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce874.php [Sat Feb 21 18:42:15.321103 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce374.php [Sat Feb 21 18:42:15.321113 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 18:42:15.321161 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce387.php [Sat Feb 21 18:42:15.321169 2026] [authz_core:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 18:42:15.321190 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/sm.php [Sat Feb 21 18:42:15.321207 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 18:42:15.321242 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-f.php [Sat Feb 21 18:42:15.321276 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-log1n.php [Sat Feb 21 18:42:15.321302 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce414.php [Sat Feb 21 18:42:15.321325 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/pages.php [Sat Feb 21 18:42:15.321348 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/product.php [Sat Feb 21 18:42:15.321366 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 18:42:15.321370 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce543.php [Sat Feb 21 18:42:15.321404 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce654.php [Sat Feb 21 18:42:15.321419 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 18:42:15.321458 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 18:42:15.321488 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 18:42:15.321509 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 18:42:15.321529 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 18:42:15.321558 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 18:42:15.321592 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 18:42:15.321645 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce386.php [Sat Feb 21 18:42:15.321711 2026] [authz_core:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01630: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/error_log [Sat Feb 21 18:42:15.321743 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/item.php [Sat Feb 21 18:42:15.321748 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 18:42:15.321785 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce167.php [Sat Feb 21 18:42:15.321804 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 104.164.173.191:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 18:42:15.321813 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/defaults.php [Sat Feb 21 18:42:15.321841 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce658.php [Sat Feb 21 18:42:15.321868 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-Owl.php [Sat Feb 21 18:42:15.321892 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce570.php [Sat Feb 21 18:42:15.321916 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/networks.php [Sat Feb 21 18:42:15.321944 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce865.php [Sat Feb 21 18:42:15.321962 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/scp.php [Sat Feb 21 18:42:15.322025 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce182.php [Sat Feb 21 18:42:15.322053 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 104.164.173.85:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/akcpa.onebox.pk/wp-nonce275.php [Sat Feb 21 18:42:21.838264 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 3.83.30.85:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 18:42:21.838678 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 3.83.30.85:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 18:42:21.839291 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 3.83.30.85:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 18:42:36.664208 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 66.249.79.202:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 18:42:41.507062 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm2UFAuKWjBndpBvNwcUgAAAAQ"] [Sat Feb 21 18:42:41.507120 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm2UFAuKWjBndpBvNwcUgAAAAQ"] [Sat Feb 21 18:43:24.443310 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:43:24.542881 2026] [security2:error] [pid 2118467:tid 2118467] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm2e1AuKWjBndpBvNwcaQAAAAQ"] [Sat Feb 21 18:43:24.542986 2026] [security2:error] [pid 2118467:tid 2118467] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm2e1AuKWjBndpBvNwcaQAAAAQ"] [Sat Feb 21 18:43:30.691681 2026] [security2:error] [pid 2201885:tid 2201885] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm2gXMi1barCLgbQ6H17wAAAAY"] [Sat Feb 21 18:43:30.691783 2026] [security2:error] [pid 2201885:tid 2201885] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm2gXMi1barCLgbQ6H17wAAAAY"] [Sat Feb 21 18:43:42.474302 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php.orig"] [unique_id "aZm2jppe9KOFdAtIQx5rpAAAAAw"] [Sat Feb 21 18:43:43.311189 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.php.orig"] [unique_id "aZm2j81oL3kMBEDxMn8wPQAAAAA"] [Sat Feb 21 18:43:47.099633 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2ks1oL3kMBEDxMn8wPwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 18:43:47.099792 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2ks1oL3kMBEDxMn8wPwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop0%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3 [Sat Feb 21 18:43:48.206113 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/configs/application.ini"] [unique_id "aZm2lAZjKw2rGmSiIPuPsAAAAAs"] [Sat Feb 21 18:43:49.225769 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/configs/application.ini"] [unique_id "aZm2lVMqSo7iS-0AaIsZuwAAABM"] [Sat Feb 21 18:43:56.044683 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:56.278982 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:56.530010 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:56.771136 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:57.006535 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:57.246939 2026] [proxy_fcgi:error] [pid 2203202:tid 2203202] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:57.492050 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:57.723368 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:57.999756 2026] [proxy_fcgi:error] [pid 2203202:tid 2203202] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:58.229475 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:58.688778 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:58.938559 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:59.207937 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:59.456350 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:43:59.993335 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:00.222829 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:00.748275 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:01.385576 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:01.862269 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:02.093135 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:02.438510 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2ouPsi4YomzVN4stw8QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem [Sat Feb 21 18:44:02.438608 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2ouPsi4YomzVN4stw8QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem [Sat Feb 21 18:44:03.607625 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:04.220767 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:04.451455 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:04.706588 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:05.656230 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:06.173189 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:06.633243 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:06.837653 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2plAuKWjBndpBvNwchQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 18:44:06.837755 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2plAuKWjBndpBvNwchQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 18:44:07.092504 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:07.855262 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:08.347915 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:08.789882 2026] [security2:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterele-global": Permission denied [hostname "masterele.gr"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZm2qI_mF86VY-svYl1AXwAAAAM"] [Sat Feb 21 18:44:08.789955 2026] [security2:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterele-ip": Permission denied [hostname "masterele.gr"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZm2qI_mF86VY-svYl1AXwAAAAM"] [Sat Feb 21 18:44:09.514291 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:10.075400 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:16.303236 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2sDTmOKCj9aq7wSOclQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq%2F2 [Sat Feb 21 18:44:16.303321 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm2sDTmOKCj9aq7wSOclQAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fmq%2F2 [Sat Feb 21 18:44:17.492163 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:17.763762 2026] [proxy_fcgi:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:17.764533 2026] [security2:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterele-global": Permission denied [hostname "masterele.gr"] [uri "/wso.php"] [unique_id "aZm2sTTmOKCj9aq7wSOclgAAAAE"] [Sat Feb 21 18:44:17.764621 2026] [security2:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterele-ip": Permission denied [hostname "masterele.gr"] [uri "/wso.php"] [unique_id "aZm2sTTmOKCj9aq7wSOclgAAAAE"] [Sat Feb 21 18:44:18.289923 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:18.576474 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:19.124835 2026] [proxy_fcgi:error] [pid 2203202:tid 2203202] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:20.440844 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:20.722542 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:22.240132 2026] [proxy_fcgi:error] [pid 2203202:tid 2203202] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:22.473634 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:22.758171 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:23.479404 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:23.729472 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:23.960313 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:24.212934 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:26.077918 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:26.078506 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterele-global": Permission denied [hostname "masterele.gr"] [uri "/cool.php"] [unique_id "aZm2ulAuKWjBndpBvNwclAAAAAQ"] [Sat Feb 21 18:44:26.078542 2026] [security2:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/masterele-ip": Permission denied [hostname "masterele.gr"] [uri "/cool.php"] [unique_id "aZm2ulAuKWjBndpBvNwclAAAAAQ"] [Sat Feb 21 18:44:26.336468 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:26.599786 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:27.006822 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:27.238204 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:27.798278 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:28.297919 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:29.617888 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:29.853833 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:30.085116 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:30.318636 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:30.550644 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:31.033494 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:31.263790 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:31.520631 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:32.259808 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:32.525520 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:32.984683 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:33.215430 2026] [proxy_fcgi:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:33.472480 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:33.966097 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:34.479612 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:35.096578 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:35.792358 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:36.255936 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:37.253993 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:37.574249 2026] [proxy_fcgi:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:37.819650 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:38.357271 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:39.336109 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:39.618138 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:39.868403 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:40.130807 2026] [proxy_fcgi:error] [pid 2202872:tid 2202872] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:40.372536 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/sources/api/.env"] [unique_id "aZm2yM1oL3kMBEDxMn8wXAAAAAA"] [Sat Feb 21 18:44:40.770547 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:41.122085 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /sources/api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/sources/api/.env"] [unique_id "aZm2yezO4t90cpHbdKFPzwAAAAU"] [Sat Feb 21 18:44:41.232752 2026] [proxy_fcgi:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:41.500606 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:41.959746 2026] [proxy_fcgi:error] [pid 2203202:tid 2203202] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:42.891589 2026] [proxy_fcgi:error] [pid 2203202:tid 2203202] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:43.131205 2026] [proxy_fcgi:error] [pid 2206493:tid 2206493] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:43.856391 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:44.086518 2026] [proxy_fcgi:error] [pid 2204873:tid 2204873] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:44.317233 2026] [proxy_fcgi:error] [pid 2190250:tid 2190250] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:44.838077 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:45.075761 2026] [proxy_fcgi:error] [pid 2118467:tid 2118467] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:45.517887 2026] [proxy_fcgi:error] [pid 2172634:tid 2172634] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:46.159823 2026] [proxy_fcgi:error] [pid 2208840:tid 2208840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:46.451092 2026] [proxy_fcgi:error] [pid 2205197:tid 2205197] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:46.682556 2026] [proxy_fcgi:error] [pid 2205840:tid 2205840] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:46.923064 2026] [proxy_fcgi:error] [pid 2201885:tid 2201885] [client 104.46.239.31:0] AH01071: Got error 'Primary script unknown' [Sat Feb 21 18:44:48.035416 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/api/.git/config"] [unique_id "aZm20AZjKw2rGmSiIPuP3gAAAAs"] [Sat Feb 21 18:44:48.813302 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /api/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/api/.git/config"] [unique_id "aZm20FAuKWjBndpBvNwcpgAAAAQ"] [Sat Feb 21 18:44:55.065514 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm21o_mF86VY-svYl1AgQAAAAM"] [Sat Feb 21 18:44:55.065602 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm21o_mF86VY-svYl1AgQAAAAM"] [Sat Feb 21 18:44:57.393370 2026] [security2:error] [pid 2190250:tid 2190250] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm22FMqSo7iS-0AaIsZ7AAAABM"] [Sat Feb 21 18:44:57.393430 2026] [security2:error] [pid 2190250:tid 2190250] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm22FMqSo7iS-0AaIsZ7AAAABM"] [Sat Feb 21 18:45:09.327027 2026] [security2:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZm25FAuKWjBndpBvNwcsgAAAAQ"] [Sat Feb 21 18:45:09.327128 2026] [security2:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/wp-cron.php"] [unique_id "aZm25FAuKWjBndpBvNwcsgAAAAQ"] [Sat Feb 21 18:45:12.299835 2026] [security2:error] [pid 2204873:tid 2204873] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm26OzO4t90cpHbdKFP4gAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 18:45:12.299921 2026] [security2:error] [pid 2204873:tid 2204873] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm26OzO4t90cpHbdKFP4gAAAAU"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem [Sat Feb 21 18:45:12.693043 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/drupal/coder/.git/info/refs"] [unique_id "aZm26E-1x314J6ndw4N0lAAAAAI"] [Sat Feb 21 18:45:13.465554 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/refs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/drupal/coder/.git/info/refs"] [unique_id "aZm26TTmOKCj9aq7wSOcugAAAAE"] [Sat Feb 21 18:45:14.615947 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/drupal/coder/.git/info/exclude"] [unique_id "aZm26gZjKw2rGmSiIPuP7QAAAAs"] [Sat Feb 21 18:45:15.372481 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/info/exclude"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/drupal/coder/.git/info/exclude"] [unique_id "aZm261MqSo7iS-0AaIsZ9AAAABM"] [Sat Feb 21 18:45:16.622692 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/drupal/coder/.git/objects/info"] [unique_id "aZm27OPsi4YomzVN4stxIwAAAAk"] [Sat Feb 21 18:45:17.527629 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/drupal/coder/.git/objects/info"] [unique_id "aZm27Zpe9KOFdAtIQx5r6gAAAAw"] [Sat Feb 21 18:45:18.697446 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info/packs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/drupal/coder/.git/objects/info/packs"] [unique_id "aZm27gZjKw2rGmSiIPuP7wAAAAs"] [Sat Feb 21 18:45:19.484828 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /vendor/drupal/coder/.git/objects/info/packs"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/drupal/coder/.git/objects/info/packs"] [unique_id "aZm274_mF86VY-svYl1AjQAAAAM"] [Sat Feb 21 18:45:20.787624 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/info.log"] [unique_id "aZm28OPsi4YomzVN4stxJQAAAAk"] [Sat Feb 21 18:45:21.599804 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/info.log"] [unique_id "aZm28U-1x314J6ndw4N0mQAAAAI"] [Sat Feb 21 18:45:30.718008 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZm2-nMi1barCLgbQ6H2QwAAAAY"] [Sat Feb 21 18:45:31.459775 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/module/info/include/mysql/phpcms_info.sql"] [unique_id "aZm2-wZjKw2rGmSiIPuP9wAAAAs"] [Sat Feb 21 18:45:32.569255 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/phpinfo.bak"] [unique_id "aZm2_DTmOKCj9aq7wSOcxQAAAAE"] [Sat Feb 21 18:45:33.289770 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/phpinfo.bak"] [unique_id "aZm2_QZjKw2rGmSiIPuP-AAAAAs"] [Sat Feb 21 18:45:36.665905 2026] [autoindex:error] [pid 2208840:tid 2208840] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:42.045874 2026] [autoindex:error] [pid 2203202:tid 2203202] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:42.332057 2026] [autoindex:error] [pid 2201885:tid 2201885] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:43.216085 2026] [autoindex:error] [pid 2201885:tid 2201885] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/js/tinymce/skins/lightgray/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:43.526151 2026] [autoindex:error] [pid 2206493:tid 2206493] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:44.199716 2026] [autoindex:error] [pid 2204873:tid 2204873] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:44.482308 2026] [autoindex:error] [pid 2203202:tid 2203202] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:45.641965 2026] [autoindex:error] [pid 2201885:tid 2201885] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:46.465179 2026] [autoindex:error] [pid 2118467:tid 2118467] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:47.312702 2026] [autoindex:error] [pid 2172634:tid 2172634] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:47.868183 2026] [autoindex:error] [pid 2205197:tid 2205197] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:48.975860 2026] [autoindex:error] [pid 2208840:tid 2208840] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:49.276697 2026] [autoindex:error] [pid 2190250:tid 2190250] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:49.573198 2026] [autoindex:error] [pid 2205840:tid 2205840] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:50.132497 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3Ds1oL3kMBEDxMn8wigAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:45:50.132564 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3Ds1oL3kMBEDxMn8wigAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:45:51.297146 2026] [autoindex:error] [pid 2172634:tid 2172634] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:45:51.564177 2026] [autoindex:error] [pid 2205840:tid 2205840] [client 20.205.120.43:0] AH01276: Cannot serve directory /home/ahkcompk/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.php8,index.php7,index.php5,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.jp,index.phtml,index.shtml,index.xhtml,index.html,index.htm,index.js) found, and server-generated directory index forbidden by Options directive [Sat Feb 21 18:46:05.019095 2026] [security2:error] [pid 2172634:tid 2172634] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm3G5pe9KOFdAtIQx5sDwAAAAw"] [Sat Feb 21 18:46:05.019189 2026] [security2:error] [pid 2172634:tid 2172634] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm3G5pe9KOFdAtIQx5sDwAAAAw"] [Sat Feb 21 18:46:06.819823 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:46:16.820727 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-content/.git/config"] [unique_id "aZm3KOPsi4YomzVN4stxTwAAAAk"] [Sat Feb 21 18:46:17.644530 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-content/.git/config"] [unique_id "aZm3KVMqSo7iS-0AaIsaHgAAABM"] [Sat Feb 21 18:46:18.816785 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "aZm3Kk-1x314J6ndw4N0twAAAAI"] [Sat Feb 21 18:46:19.638047 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /blog/wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/blog/wp-content/themes/.git/config"] [unique_id "aZm3K4_mF86VY-svYl1AvgAAAAM"] [Sat Feb 21 18:46:20.954808 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-content/themes/.git/config"] [unique_id "aZm3LAZjKw2rGmSiIPuQGgAAAAs"] [Sat Feb 21 18:46:21.729296 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/themes/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-content/themes/.git/config"] [unique_id "aZm3LezO4t90cpHbdKFQFwAAAAU"] [Sat Feb 21 18:46:22.905799 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "aZm3Lk-1x314J6ndw4N0uQAAAAI"] [Sat Feb 21 18:46:23.670940 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /wp-content/plugins/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-content/plugins/.git/config"] [unique_id "aZm3L1MqSo7iS-0AaIsaIQAAABM"] [Sat Feb 21 18:46:24.780475 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/db.sql"] [unique_id "aZm3MAZjKw2rGmSiIPuQHAAAAAs"] [Sat Feb 21 18:46:25.547940 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/db.sql"] [unique_id "aZm3MZpe9KOFdAtIQx5sHgAAAAw"] [Sat Feb 21 18:46:26.706728 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/mysql.sql"] [unique_id "aZm3Ms1oL3kMBEDxMn8woQAAAAA"] [Sat Feb 21 18:46:27.516381 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/mysql.sql"] [unique_id "aZm3M1AuKWjBndpBvNwc5wAAAAQ"] [Sat Feb 21 18:46:28.671483 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/dump.sql"] [unique_id "aZm3NM1oL3kMBEDxMn8wogAAAAA"] [Sat Feb 21 18:46:29.501671 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/dump.sql"] [unique_id "aZm3NU-1x314J6ndw4N0vAAAAAI"] [Sat Feb 21 18:46:30.596210 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/uploads/db.sql"] [unique_id "aZm3No_mF86VY-svYl1AxAAAAAM"] [Sat Feb 21 18:46:30.767208 2026] [core:error] [pid 2204873:tid 2204873] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.767274 2026] [core:error] [pid 2204873:tid 2204873] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.804365 2026] [core:error] [pid 2205197:tid 2205197] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.804428 2026] [core:error] [pid 2205197:tid 2205197] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.840734 2026] [core:error] [pid 2203202:tid 2203202] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.840791 2026] [core:error] [pid 2203202:tid 2203202] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.877722 2026] [core:error] [pid 2202872:tid 2202872] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:30.877772 2026] [core:error] [pid 2202872:tid 2202872] [client 158.158.33.103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sat Feb 21 18:46:31.557448 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/uploads/db.sql"] [unique_id "aZm3NzTmOKCj9aq7wSOc8QAAAAE"] [Sat Feb 21 18:46:32.566791 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3OFAuKWjBndpBvNwc6QAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 18:46:32.566852 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3OFAuKWjBndpBvNwc6QAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fmq%2F0 [Sat Feb 21 18:46:32.737876 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/uploads/mysql.sql"] [unique_id "aZm3OI_mF86VY-svYl1AxQAAAAM"] [Sat Feb 21 18:46:33.492701 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/uploads/mysql.sql"] [unique_id "aZm3OVMqSo7iS-0AaIsaJAAAABM"] [Sat Feb 21 18:46:34.693727 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backup/db.sql"] [unique_id "aZm3Ok-1x314J6ndw4N0wAAAAAI"] [Sat Feb 21 18:46:35.519401 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backup/db.sql"] [unique_id "aZm3O-Psi4YomzVN4stxWgAAAAk"] [Sat Feb 21 18:46:36.692438 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backups/db.sql"] [unique_id "aZm3PAZjKw2rGmSiIPuQIQAAAAs"] [Sat Feb 21 18:46:37.657607 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backups/db.sql"] [unique_id "aZm3PTTmOKCj9aq7wSOc9AAAAAE"] [Sat Feb 21 18:46:38.834254 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/db_backup.sql"] [unique_id "aZm3PlMqSo7iS-0AaIsaJgAAABM"] [Sat Feb 21 18:46:39.645473 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/db_backup.sql"] [unique_id "aZm3P81oL3kMBEDxMn8wqgAAAAA"] [Sat Feb 21 18:46:40.897988 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZm3QAZjKw2rGmSiIPuQIwAAAAs"] [Sat Feb 21 18:46:41.673313 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/uploads/db_backup.sql"] [unique_id "aZm3QezO4t90cpHbdKFQJAAAAAU"] [Sat Feb 21 18:46:42.964869 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backup/db_backup.sql"] [unique_id "aZm3Qppe9KOFdAtIQx5sJwAAAAw"] [Sat Feb 21 18:46:43.782284 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backup/db_backup.sql"] [unique_id "aZm3Q3Mi1barCLgbQ6H2dAAAAAY"] [Sat Feb 21 18:46:44.919015 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/fullbackup.sql"] [unique_id "aZm3RDTmOKCj9aq7wSOc-AAAAAE"] [Sat Feb 21 18:46:45.699809 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/fullbackup.sql"] [unique_id "aZm3RVMqSo7iS-0AaIsaKgAAABM"] [Sat Feb 21 18:46:46.769396 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/fullwebsite.sql"] [unique_id "aZm3Ro_mF86VY-svYl1AywAAAAM"] [Sat Feb 21 18:46:47.291957 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 66.249.79.201:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 18:46:47.629169 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/fullwebsite.sql"] [unique_id "aZm3R1MqSo7iS-0AaIsaKwAAABM"] [Sat Feb 21 18:46:48.716133 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/data.sql"] [unique_id "aZm3SFAuKWjBndpBvNwc9AAAAAQ"] [Sat Feb 21 18:46:49.448811 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/data.sql"] [unique_id "aZm3SZpe9KOFdAtIQx5sKgAAAAw"] [Sat Feb 21 18:46:50.651790 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backup/data.sql"] [unique_id "aZm3SuzO4t90cpHbdKFQKgAAAAU"] [Sat Feb 21 18:46:51.534489 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backup/data.sql"] [unique_id "aZm3S81oL3kMBEDxMn8wsAAAAAA"] [Sat Feb 21 18:46:51.623176 2026] [security2:error] [pid 2206493:tid 2206493] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm3So_mF86VY-svYl1AzQAAAAM"] [Sat Feb 21 18:46:51.623248 2026] [security2:error] [pid 2206493:tid 2206493] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm3So_mF86VY-svYl1AzQAAAAM"] [Sat Feb 21 18:46:52.665571 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/uploads/data.sql"] [unique_id "aZm3TDTmOKCj9aq7wSOc_AAAAAE"] [Sat Feb 21 18:46:53.421567 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/uploads/data.sql"] [unique_id "aZm3TePsi4YomzVN4stxZQAAAAk"] [Sat Feb 21 18:46:54.668138 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backups/data.sql"] [unique_id "aZm3Tk-1x314J6ndw4N0ywAAAAI"] [Sat Feb 21 18:46:55.545101 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backups/data.sql"] [unique_id "aZm3T1MqSo7iS-0AaIsaLwAAABM"] [Sat Feb 21 18:46:56.646982 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backup/database.sql"] [unique_id "aZm3UDTmOKCj9aq7wSOc_gAAAAE"] [Sat Feb 21 18:46:57.033876 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3UFAuKWjBndpBvNwc-AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:46:57.033979 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3UFAuKWjBndpBvNwc-AAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 18:46:57.380484 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backup/database.sql"] [unique_id "aZm3Uc1oL3kMBEDxMn8wswAAAAA"] [Sat Feb 21 18:47:00.083787 2026] [access_compat:error] [pid 2204873:tid 2204873] [client 223.244.35.77:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 18:47:00.084042 2026] [access_compat:error] [pid 2204873:tid 2204873] [client 223.244.35.77:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 18:47:00.084461 2026] [access_compat:error] [pid 2204873:tid 2204873] [client 223.244.35.77:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 18:47:01.795676 2026] [security2:error] [pid 2208840:tid 2208840] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-global": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm3VDTmOKCj9aq7wSOdAAAAAAE"] [Sat Feb 21 18:47:01.795746 2026] [security2:error] [pid 2208840:tid 2208840] [client 34.134.96.74:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/taartisan-ip": Permission denied [hostname "taartisan.com"] [uri "/cgi-sys/ea-php83/contents/xmlrpc.php"] [unique_id "aZm3VDTmOKCj9aq7wSOdAAAAAAE"] [Sat Feb 21 18:47:03.566508 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backups/database.sql"] [unique_id "aZm3VzTmOKCj9aq7wSOdAQAAAAE"] [Sat Feb 21 18:47:08.696949 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backups/database.sql"] [unique_id "aZm3XJpe9KOFdAtIQx5sMAAAAAw"] [Sat Feb 21 18:47:09.937432 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/wordpress.sql"] [unique_id "aZm3XU-1x314J6ndw4N00wAAAAI"] [Sat Feb 21 18:47:10.705516 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/wordpress.sql"] [unique_id "aZm3XlMqSo7iS-0AaIsaNwAAABM"] [Sat Feb 21 18:47:11.783014 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backups/wordpress.sql"] [unique_id "aZm3X1AuKWjBndpBvNwdAQAAAAQ"] [Sat Feb 21 18:47:12.550243 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backups/wordpress.sql"] [unique_id "aZm3YFMqSo7iS-0AaIsaOAAAABM"] [Sat Feb 21 18:47:13.789394 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/dbdump.sql"] [unique_id "aZm3YXMi1barCLgbQ6H2hAAAAAY"] [Sat Feb 21 18:47:14.739404 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/dbdump.sql"] [unique_id "aZm3Yppe9KOFdAtIQx5sNAAAAAw"] [Sat Feb 21 18:47:16.253985 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/uploads/dbdump.sql"] [unique_id "aZm3ZDTmOKCj9aq7wSOdCQAAAAE"] [Sat Feb 21 18:47:17.002572 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/uploads/dbdump.sql"] [unique_id "aZm3Zc1oL3kMBEDxMn8wvgAAAAA"] [Sat Feb 21 18:47:18.004830 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm3Zc1oL3kMBEDxMn8wvgAAAAA"] [Sat Feb 21 18:47:18.004919 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm3Zc1oL3kMBEDxMn8wvgAAAAA"] [Sat Feb 21 18:47:18.085478 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backups/dbdump.sql"] [unique_id "aZm3ZlAuKWjBndpBvNwdBQAAAAQ"] [Sat Feb 21 18:47:19.174365 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backups/dbdump.sql"] [unique_id "aZm3Z4_mF86VY-svYl1A3QAAAAM"] [Sat Feb 21 18:47:20.335583 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-content/backup/dbdump.sql"] [unique_id "aZm3aFAuKWjBndpBvNwdBgAAAAQ"] [Sat Feb 21 18:47:21.116243 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-content/backup/dbdump.sql"] [unique_id "aZm3aY_mF86VY-svYl1A3gAAAAM"] [Sat Feb 21 18:47:22.255875 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wp-config.bak"] [unique_id "aZm3alAuKWjBndpBvNwdBwAAAAQ"] [Sat Feb 21 18:47:22.256475 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.bak"] [unique_id "aZm3alAuKWjBndpBvNwdBwAAAAQ"] [Sat Feb 21 18:47:23.004235 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wp-config.bak"] [unique_id "aZm3a5pe9KOFdAtIQx5sOAAAAAw"] [Sat Feb 21 18:47:23.004671 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.bak"] [unique_id "aZm3a5pe9KOFdAtIQx5sOAAAAAw"] [Sat Feb 21 18:47:26.170566 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.php.bak1"] [unique_id "aZm3blMqSo7iS-0AaIsaQgAAABM"] [Sat Feb 21 18:47:26.844074 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.php.bak1"] [unique_id "aZm3bo_mF86VY-svYl1A4gAAAAM"] [Sat Feb 21 18:47:27.914134 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wp-config.bak1"] [unique_id "aZm3b81oL3kMBEDxMn8wxgAAAAA"] [Sat Feb 21 18:47:28.774648 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.bak" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.bak found within REQUEST_FILENAME: /wp-config.bak1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wp-config.bak1"] [unique_id "aZm3cE-1x314J6ndw4N04AAAAAI"] [Sat Feb 21 18:47:30.455795 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3clAuKWjBndpBvNwdDAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:47:30.455880 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3clAuKWjBndpBvNwdDAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 18:47:38.483406 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:47:40.281171 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm3e5pe9KOFdAtIQx5sQwAAAAw"] [Sat Feb 21 18:47:40.281493 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm3e5pe9KOFdAtIQx5sQwAAAAw"] [Sat Feb 21 18:47:46.051716 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm3gFAuKWjBndpBvNwdFwAAAAQ"] [Sat Feb 21 18:47:46.051778 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm3gFAuKWjBndpBvNwdFwAAAAQ"] [Sat Feb 21 18:47:48.667793 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 66.249.79.203:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 18:47:58.320157 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/var/debug.log"] [unique_id "aZm3jo_mF86VY-svYl1A-AAAAAM"] [Sat Feb 21 18:47:59.082607 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/var/debug.log"] [unique_id "aZm3j81oL3kMBEDxMn8w3QAAAAA"] [Sat Feb 21 18:48:00.105443 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/content/debug.log"] [unique_id "aZm3kI_mF86VY-svYl1A-QAAAAM"] [Sat Feb 21 18:48:00.952183 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/content/debug.log"] [unique_id "aZm3kJpe9KOFdAtIQx5sUgAAAAw"] [Sat Feb 21 18:48:02.213559 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/npm-debug.log"] [unique_id "aZm3knMi1barCLgbQ6H2oAAAAAY"] [Sat Feb 21 18:48:02.214017 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/npm-debug.log" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /npm-debug.log found within REQUEST_FILENAME: /npm-debug.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/npm-debug.log"] [unique_id "aZm3knMi1barCLgbQ6H2oAAAAAY"] [Sat Feb 21 18:48:02.995650 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/npm-debug.log"] [unique_id "aZm3klMqSo7iS-0AaIsaXQAAABM"] [Sat Feb 21 18:48:02.996008 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/npm-debug.log" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /npm-debug.log found within REQUEST_FILENAME: /npm-debug.log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/npm-debug.log"] [unique_id "aZm3klMqSo7iS-0AaIsaXQAAABM"] [Sat Feb 21 18:48:04.723259 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/yarn-debug.log"] [unique_id "aZm3lDTmOKCj9aq7wSOdLAAAAAE"] [Sat Feb 21 18:48:05.583420 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/yarn-debug.log"] [unique_id "aZm3lezO4t90cpHbdKFQWwAAAAU"] [Sat Feb 21 18:48:06.728555 2026] [security2:error] [pid 2190250:tid 2190250] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "faisal.247reactionpower.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZm3llMqSo7iS-0AaIsaXwAAABM"] [Sat Feb 21 18:48:06.728667 2026] [security2:error] [pid 2190250:tid 2190250] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "faisal.247reactionpower.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZm3llMqSo7iS-0AaIsaXwAAABM"] [Sat Feb 21 18:48:06.868401 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/firebase-debug.log"] [unique_id "aZm3llAuKWjBndpBvNwdJwAAAAQ"] [Sat Feb 21 18:48:07.691056 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/firebase-debug.log"] [unique_id "aZm3l-Psi4YomzVN4stxkQAAAAk"] [Sat Feb 21 18:48:13.061663 2026] [security2:error] [pid 2205197:tid 2205197] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "faisal.247reactionpower.com"] [uri "/xsas.php"] [unique_id "aZm3nePsi4YomzVN4stxlAAAAAk"] [Sat Feb 21 18:48:13.061740 2026] [security2:error] [pid 2205197:tid 2205197] [client 20.189.202.45:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "faisal.247reactionpower.com"] [uri "/xsas.php"] [unique_id "aZm3nePsi4YomzVN4stxlAAAAAk"] [Sat Feb 21 18:48:16.573769 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/debug.sql"] [unique_id "aZm3oE-1x314J6ndw4N0_wAAAAI"] [Sat Feb 21 18:48:17.511180 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/debug.sql"] [unique_id "aZm3oXMi1barCLgbQ6H2qgAAAAY"] [Sat Feb 21 18:48:22.957383 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/mysql_debug.sql"] [unique_id "aZm3pppe9KOFdAtIQx5sYgAAAAw"] [Sat Feb 21 18:48:23.726022 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/mysql_debug.sql"] [unique_id "aZm3p-zO4t90cpHbdKFQZwAAAAU"] [Sat Feb 21 18:48:40.867415 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3uHMi1barCLgbQ6H2tgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:48:40.867495 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3uHMi1barCLgbQ6H2tgAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A4 [Sat Feb 21 18:48:46.008195 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3vXMi1barCLgbQ6H2uQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:48:46.008294 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm3vXMi1barCLgbQ6H2uQAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1 [Sat Feb 21 18:48:52.034271 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/config.inc"] [unique_id "aZm3xFMqSo7iS-0AaIsaegAAABM"] [Sat Feb 21 18:48:52.763427 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/config.inc"] [unique_id "aZm3xOPsi4YomzVN4stxrQAAAAk"] [Sat Feb 21 18:49:06.228669 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/config/parameters.yml"] [unique_id "aZm30lMqSo7iS-0AaIsagAAAABM"] [Sat Feb 21 18:49:07.106597 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/config/parameters.yml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /config/parameters.yml found within REQUEST_FILENAME: /app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/config/parameters.yml"] [unique_id "aZm30zTmOKCj9aq7wSOdUAAAAAE"] [Sat Feb 21 18:49:08.496184 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/composer.json"] [unique_id "aZm31I_mF86VY-svYl1BIAAAAAM"] [Sat Feb 21 18:49:09.328431 2026] [security2:error] [pid 2204873:tid 2204873] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/composer.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /composer.json found within REQUEST_FILENAME: /composer.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/composer.json"] [unique_id "aZm31ezO4t90cpHbdKFQfgAAAAU"] [Sat Feb 21 18:49:12.102327 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:49:12.115978 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:49:14.029780 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:49:17.349159 2026] [security2:error] [pid 2211549:tid 2211549] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/php.log"] [unique_id "aZm33cizGmQnshdVONThbgAAAAc"] [Sat Feb 21 18:49:18.079706 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/php.log"] [unique_id "aZm33nMi1barCLgbQ6H2yQAAAAY"] [Sat Feb 21 18:49:18.573324 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm33lMqSo7iS-0AaIsajQAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:49:18.573444 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm33lMqSo7iS-0AaIsajQAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:49:19.245313 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/build.log"] [unique_id "aZm33-Psi4YomzVN4stxvgAAAAk"] [Sat Feb 21 18:49:20.036863 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 18:49:20.075280 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/build.log"] [unique_id "aZm34E-1x314J6ndw4N1JgAAAAI"] [Sat Feb 21 18:49:23.256536 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm341AuKWjBndpBvNwdUwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:49:23.256657 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm341AuKWjBndpBvNwdUwAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fsubsystem%2Fsda2%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0 [Sat Feb 21 18:49:26.989148 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm35o_mF86VY-svYl1BLAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:49:26.989243 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm35o_mF86VY-svYl1BLAAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:49:48.169474 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/service.pwd"] [unique_id "aZm3_M1oL3kMBEDxMn8xNgAAAAA"] [Sat Feb 21 18:49:48.884887 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/service.pwd"] [unique_id "aZm3_FAuKWjBndpBvNwdbgAAAAQ"] [Sat Feb 21 18:49:55.785112 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app/etc/local.xml.bak"] [unique_id "aZm4A1MqSo7iS-0AaIsasQAAABM"] [Sat Feb 21 18:49:56.544204 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app/etc/local.xml.bak"] [unique_id "aZm4BE-1x314J6ndw4N1SgAAAAI"] [Sat Feb 21 18:49:57.837898 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/database.sql"] [unique_id "aZm4BXMi1barCLgbQ6H28QAAAAY"] [Sat Feb 21 18:49:58.601149 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/database.sql"] [unique_id "aZm4Bo_mF86VY-svYl1BTwAAAAM"] [Sat Feb 21 18:49:59.702918 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/mysql.sql"] [unique_id "aZm4B1AuKWjBndpBvNwdcgAAAAQ"] [Sat Feb 21 18:50:00.604069 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/mysql.sql"] [unique_id "aZm4CHMi1barCLgbQ6H28wAAAAY"] [Sat Feb 21 18:50:02.110110 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/backup.sql"] [unique_id "aZm4ClAuKWjBndpBvNwdcwAAAAQ"] [Sat Feb 21 18:50:03.242404 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/backup.sql"] [unique_id "aZm4C-Psi4YomzVN4stx6gAAAAk"] [Sat Feb 21 18:50:04.601130 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/site.sql"] [unique_id "aZm4DI_mF86VY-svYl1BUgAAAAM"] [Sat Feb 21 18:50:05.480471 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/site.sql"] [unique_id "aZm4DTTmOKCj9aq7wSOdhAAAAAE"] [Sat Feb 21 18:50:06.786198 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/wordpress.sql"] [unique_id "aZm4DgZjKw2rGmSiIPuQqwAAAAs"] [Sat Feb 21 18:50:07.766004 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/wordpress.sql"] [unique_id "aZm4D81oL3kMBEDxMn8xQgAAAAA"] [Sat Feb 21 18:50:13.528146 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aZm4FePsi4YomzVN4stx8AAAAAk"] [Sat Feb 21 18:50:14.267657 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4Fs1oL3kMBEDxMn8xSAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 18:50:14.267709 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4Fs1oL3kMBEDxMn8xSAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 18:50:14.283160 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "parameters.yml" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: parameters.yml found within ARGS:file: app/config/parameters.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aZm4FgZjKw2rGmSiIPuQsgAAAAs"] [Sat Feb 21 18:50:15.393114 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/storage/oauth-private.key"] [unique_id "aZm4F-Psi4YomzVN4stx8gAAAAk"] [Sat Feb 21 18:50:16.093841 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/storage/oauth-private.key"] [unique_id "aZm4GFMqSo7iS-0AaIsavQAAABM"] [Sat Feb 21 18:50:17.224152 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/storage/oauth-public.key"] [unique_id "aZm4Gc1oL3kMBEDxMn8xTAAAAAA"] [Sat Feb 21 18:50:17.980406 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/storage/oauth-public.key"] [unique_id "aZm4GU-1x314J6ndw4N1WwAAAAI"] [Sat Feb 21 18:50:19.147462 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/storage/logs/stack.log"] [unique_id "aZm4G1MqSo7iS-0AaIsawAAAABM"] [Sat Feb 21 18:50:19.865510 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/storage/logs/stack.log"] [unique_id "aZm4G1AuKWjBndpBvNwdggAAAAQ"] [Sat Feb 21 18:50:21.048905 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/storage/debug.log"] [unique_id "aZm4HQZjKw2rGmSiIPuQugAAAAs"] [Sat Feb 21 18:50:21.829011 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/storage/debug.log"] [unique_id "aZm4HTTmOKCj9aq7wSOdkQAAAAE"] [Sat Feb 21 18:50:22.628549 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4HlAuKWjBndpBvNwdhAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1 [Sat Feb 21 18:50:22.628629 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4HlAuKWjBndpBvNwdhAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1 [Sat Feb 21 18:50:24.129362 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4IDTmOKCj9aq7wSOdkgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:50:24.129470 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4IDTmOKCj9aq7wSOdkgAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:50:38.837167 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:51:02.007665 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/vendor/.env.example"] [unique_id "aZm4Rk-1x314J6ndw4N1egAAAAI"] [Sat Feb 21 18:51:02.859208 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /vendor/.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/vendor/.env.example"] [unique_id "aZm4RlMqSo7iS-0AaIsa3AAAABM"] [Sat Feb 21 18:51:10.668943 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/errors.log"] [unique_id "aZm4TnMi1barCLgbQ6H3JQAAAAY"] [Sat Feb 21 18:51:11.609184 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/errors.log"] [unique_id "aZm4T0-1x314J6ndw4N1fwAAAAI"] [Sat Feb 21 18:51:12.664936 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4UOPsi4YomzVN4styGQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:51:12.665123 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4UOPsi4YomzVN4styGQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 18:51:12.804902 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/config.old"] [unique_id "aZm4UM1oL3kMBEDxMn8xbgAAAAA"] [Sat Feb 21 18:51:13.636183 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/config.old"] [unique_id "aZm4UVMqSo7iS-0AaIsa4gAAABM"] [Sat Feb 21 18:51:14.977136 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/export.sql"] [unique_id "aZm4Uppe9KOFdAtIQx5s4AAAAAw"] [Sat Feb 21 18:51:15.752834 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/export.sql"] [unique_id "aZm4U4_mF86VY-svYl1BhgAAAAM"] [Sat Feb 21 18:51:50.584771 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/database_backup.sql"] [unique_id "aZm4dk-1x314J6ndw4N1kgAAAAI"] [Sat Feb 21 18:51:51.313198 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/database_backup.sql"] [unique_id "aZm4dwZjKw2rGmSiIPuQ8QAAAAs"] [Sat Feb 21 18:51:55.426428 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:52:06.005918 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4hePsi4YomzVN4styMwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 18:52:06.005982 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4hePsi4YomzVN4styMwAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fmq [Sat Feb 21 18:52:07.458151 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.93.89.136:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "mail.mrxcoin.io"] [uri "/.env"] [unique_id "aZm4h1AuKWjBndpBvNwdwAAAAAQ"] [Sat Feb 21 18:52:08.422245 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/core/config.bak"] [unique_id "aZm4iI_mF86VY-svYl1BoQAAAAM"] [Sat Feb 21 18:52:09.237085 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/core/config.bak"] [unique_id "aZm4iVMqSo7iS-0AaIsa_gAAABM"] [Sat Feb 21 18:52:12.963191 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/wordpress/wp-config.php"] [unique_id "aZm4jI_mF86VY-svYl1BowAAAAM"] [Sat Feb 21 18:52:13.285975 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4jU-1x314J6ndw4N1ngAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:52:13.286059 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4jU-1x314J6ndw4N1ngAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem [Sat Feb 21 18:52:13.739018 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wordpress/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/wordpress/wp-config.php"] [unique_id "aZm4jc1oL3kMBEDxMn8xjAAAAAA"] [Sat Feb 21 18:52:16.903398 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.git/HEAD"] [unique_id "aZm4kAZjKw2rGmSiIPuQ_gAAAAs"] [Sat Feb 21 18:52:17.672594 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.git/HEAD"] [unique_id "aZm4kTTmOKCj9aq7wSOd0wAAAAE"] [Sat Feb 21 18:52:18.806511 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.svn/entries"] [unique_id "aZm4ko_mF86VY-svYl1BpgAAAAM"] [Sat Feb 21 18:52:19.724025 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.svn/ found within REQUEST_FILENAME: /.svn/entries"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.svn/entries"] [unique_id "aZm4k5pe9KOFdAtIQx5tAwAAAAw"] [Sat Feb 21 18:52:20.979584 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/hgrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.hg/hgrc"] [unique_id "aZm4lHMi1barCLgbQ6H3SwAAAAY"] [Sat Feb 21 18:52:21.316287 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4lVAuKWjBndpBvNwdyAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:52:21.316394 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4lVAuKWjBndpBvNwdyAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:52:21.804874 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.hg/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.hg/ found within REQUEST_FILENAME: /.hg/hgrc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.hg/hgrc"] [unique_id "aZm4lQZjKw2rGmSiIPuRAQAAAAs"] [Sat Feb 21 18:52:25.970855 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4mc1oL3kMBEDxMn8xkAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 18:52:25.970975 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4mc1oL3kMBEDxMn8xkAAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice [Sat Feb 21 18:52:28.634316 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4nFAuKWjBndpBvNwdzAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 18:52:28.634396 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm4nFAuKWjBndpBvNwdzAAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda [Sat Feb 21 18:52:34.725826 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/public.key"] [unique_id "aZm4ogZjKw2rGmSiIPuRCAAAAAs"] [Sat Feb 21 18:52:35.629238 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/public.key"] [unique_id "aZm4o1AuKWjBndpBvNwd0AAAAAQ"] [Sat Feb 21 18:52:36.746810 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/ssl.key"] [unique_id "aZm4pI_mF86VY-svYl1BsAAAAAM"] [Sat Feb 21 18:52:37.561164 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/ssl.key"] [unique_id "aZm4pU-1x314J6ndw4N1qwAAAAI"] [Sat Feb 21 18:52:42.593133 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/selfsigned.key"] [unique_id "aZm4qlMqSo7iS-0AaIsbEAAAABM"] [Sat Feb 21 18:52:43.394173 2026] [security2:error] [pid 2201885:tid 2201885] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/selfsigned.key"] [unique_id "aZm4q3Mi1barCLgbQ6H3VwAAAAY"] [Sat Feb 21 18:52:44.650973 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/nginx.conf"] [unique_id "aZm4rE-1x314J6ndw4N1rwAAAAI"] [Sat Feb 21 18:52:45.428930 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/nginx.conf"] [unique_id "aZm4rVAuKWjBndpBvNwd1gAAAAQ"] [Sat Feb 21 18:52:46.692138 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/httpd.conf"] [unique_id "aZm4rjTmOKCj9aq7wSOd5AAAAAE"] [Sat Feb 21 18:52:47.439424 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/httpd.conf"] [unique_id "aZm4rwZjKw2rGmSiIPuREAAAAAs"] [Sat Feb 21 18:53:00.102401 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm4u0-1x314J6ndw4N1twAAAAI"] [Sat Feb 21 18:53:00.102490 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm4u0-1x314J6ndw4N1twAAAAI"] [Sat Feb 21 18:53:02.275741 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/settings.ini"] [unique_id "aZm4vjTmOKCj9aq7wSOd7QAAAAE"] [Sat Feb 21 18:53:03.096068 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/settings.ini"] [unique_id "aZm4vwZjKw2rGmSiIPuRGQAAAAs"] [Sat Feb 21 18:53:03.618573 2026] [security2:error] [pid 2201885:tid 2201885] [client 40.77.167.17:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.rentacarkarachi.com"] [uri "/"] [unique_id "aZm4v3Mi1barCLgbQ6H3YwAAAAY"] [Sat Feb 21 18:53:04.461488 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:53:12.495753 2026] [security2:error] [pid 2208840:tid 2208840] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-global": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-admin/admin-ajax.php"] [unique_id "aZm4xDTmOKCj9aq7wSOd8QAAAAE"] [Sat Feb 21 18:53:12.495842 2026] [security2:error] [pid 2208840:tid 2208840] [client 37.60.246.20:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/usmlittmann-ip": Permission denied [hostname "www.3mlittmann.us"] [uri "/cgi-sys/ea-php83/wp-admin/admin-ajax.php"] [unique_id "aZm4xDTmOKCj9aq7wSOd8QAAAAE"] [Sat Feb 21 18:53:12.874459 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/admin/settings.ini"] [unique_id "aZm4yFAuKWjBndpBvNwd5QAAAAQ"] [Sat Feb 21 18:53:13.599912 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/admin/settings.ini"] [unique_id "aZm4yc1oL3kMBEDxMn8xqwAAAAA"] [Sat Feb 21 18:53:13.611833 2026] [security2:error] [pid 2208840:tid 2208840] [client 40.77.167.132:0] ModSecurity: Rule 556ce8520d50 [id "942360"][file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "81"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "rentacarkarachi.com"] [uri "/"] [unique_id "aZm4yTTmOKCj9aq7wSOd8gAAAAE"] [Sat Feb 21 18:53:16.877879 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/admin/db.conf"] [unique_id "aZm4zDTmOKCj9aq7wSOd8wAAAAE"] [Sat Feb 21 18:53:17.859579 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/admin/db.conf"] [unique_id "aZm4zc1oL3kMBEDxMn8xrQAAAAA"] [Sat Feb 21 18:53:19.025735 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/admin/sql.conf"] [unique_id "aZm4zwZjKw2rGmSiIPuRIgAAAAs"] [Sat Feb 21 18:53:19.747565 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/admin/sql.conf"] [unique_id "aZm4zzTmOKCj9aq7wSOd9AAAAAE"] [Sat Feb 21 18:53:20.837144 2026] [security2:error] [pid 2203202:tid 2203202] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/admin/.env.bak"] [unique_id "aZm40M1oL3kMBEDxMn8xrgAAAAA"] [Sat Feb 21 18:53:21.584485 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/admin/.env.bak"] [unique_id "aZm40ePsi4YomzVN4styWgAAAAk"] [Sat Feb 21 18:53:23.477859 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm40wZjKw2rGmSiIPuRJAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice [Sat Feb 21 18:53:23.477913 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm40wZjKw2rGmSiIPuRJAAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdrivers%2Fsd%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice [Sat Feb 21 18:53:28.460711 2026] [security2:error] [pid 2205197:tid 2205197] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/private/secret.key"] [unique_id "aZm42OPsi4YomzVN4styXQAAAAk"] [Sat Feb 21 18:53:29.223797 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/private/secret.key"] [unique_id "aZm42U-1x314J6ndw4N1yAAAAAI"] [Sat Feb 21 18:53:39.991718 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.well-known/.env"] [unique_id "aZm44zTmOKCj9aq7wSOd_gAAAAE"] [Sat Feb 21 18:53:41.140060 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.well-known/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.well-known/.env"] [unique_id "aZm45VMqSo7iS-0AaIsbLwAAABM"] [Sat Feb 21 18:53:51.698294 2026] [security2:error] [pid 2202872:tid 2202872] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/configuration.bak"] [unique_id "aZm470-1x314J6ndw4N10wAAAAI"] [Sat Feb 21 18:53:52.507963 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/configuration.bak"] [unique_id "aZm48DTmOKCj9aq7wSOeBQAAAAE"] [Sat Feb 21 18:54:04.532941 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:54:21.176614 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm5DePsi4YomzVN4styeQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:54:21.176690 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm5DePsi4YomzVN4styeQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 18:54:35.277867 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm5G1MqSo7iS-0AaIsbTQAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 18:54:35.277946 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm5G1MqSo7iS-0AaIsbTQAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 18:54:41.226519 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 66.249.79.202:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 18:54:41.486478 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "bwtand.com"] [uri "/.env.sh"] [unique_id "aZm5IZpe9KOFdAtIQx5tSgAAAAw"] [Sat Feb 21 18:54:42.174866 2026] [security2:error] [pid 2190250:tid 2190250] [client 185.177.72.23:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sh"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.bwtand.com"] [uri "/.env.sh"] [unique_id "aZm5IlMqSo7iS-0AaIsbUQAAABM"] [Sat Feb 21 18:54:59.896519 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/install.sql"] [unique_id "aZm5M1AuKWjBndpBvNweGAAAAAQ"] [Sat Feb 21 18:55:00.792853 2026] [security2:error] [pid 2206493:tid 2206493] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/install.sql"] [unique_id "aZm5NI_mF86VY-svYl1B-AAAAAM"] [Sat Feb 21 18:55:02.320865 2026] [security2:error] [pid 2208840:tid 2208840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/update.sql"] [unique_id "aZm5NjTmOKCj9aq7wSOeLAAAAAE"] [Sat Feb 21 18:55:03.193430 2026] [security2:error] [pid 2205840:tid 2205840] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/update.sql"] [unique_id "aZm5NwZjKw2rGmSiIPuRXAAAAAs"] [Sat Feb 21 18:55:04.563261 2026] [security2:error] [pid 2118467:tid 2118467] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "bwtand.com"] [uri "/delete.sql"] [unique_id "aZm5OFAuKWjBndpBvNweGgAAAAQ"] [Sat Feb 21 18:55:05.493281 2026] [security2:error] [pid 2172634:tid 2172634] [client 185.177.72.23:0] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.bwtand.com"] [uri "/delete.sql"] [unique_id "aZm5OZpe9KOFdAtIQx5tVgAAAAw"] [Sat Feb 21 18:55:20.628146 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:56:33.033473 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm5kI_mF86VY-svYl1CIQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 18:56:33.033568 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm5kI_mF86VY-svYl1CIQAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A0 [Sat Feb 21 18:56:35.461903 2026] [security2:error] [pid 2206493:tid 2206493] [client 92.222.104.197:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm5ko_mF86VY-svYl1CIgAAAAM"] [Sat Feb 21 18:56:35.462043 2026] [security2:error] [pid 2206493:tid 2206493] [client 92.222.104.197:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "www.bwtand.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm5ko_mF86VY-svYl1CIgAAAAM"] [Sat Feb 21 18:56:55.507095 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 52.167.144.16:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php [Sat Feb 21 18:56:55.507421 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 52.167.144.16:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.php5 [Sat Feb 21 18:56:55.507816 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 52.167.144.16:0] AH01797: client denied by server configuration: /home/masterco/public_html/index.phtml [Sat Feb 21 18:57:07.217766 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:57:57.440890 2026] [security2:error] [pid 2201885:tid 2201885] [client 139.59.127.187:0] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "247reactionpower.com"] [uri "/sftp-config.json"] [unique_id "aZm55XMi1barCLgbQ6H35wAAAAY"] [Sat Feb 21 18:58:04.715237 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm57AZjKw2rGmSiIPuRpwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:58:04.715371 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm57AZjKw2rGmSiIPuRpwAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 18:58:29.432904 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:58:32.291581 2026] [security2:error] [pid 2201885:tid 2201885] [client 51.107.69.151:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-global": Permission denied [hostname "redpenguinit.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm6CHMi1barCLgbQ6H3-AAAAAY"] [Sat Feb 21 18:58:32.291634 2026] [security2:error] [pid 2201885:tid 2201885] [client 51.107.69.151:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/redpenguinit-ip": Permission denied [hostname "redpenguinit.com"] [uri "/cgi-sys/ea-php74/index.php"] [unique_id "aZm6CHMi1barCLgbQ6H3-AAAAAY"] [Sat Feb 21 18:59:01.973356 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6JY_mF86VY-svYl1CYgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:59:01.973442 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6JY_mF86VY-svYl1CYgAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice [Sat Feb 21 18:59:09.516743 2026] [security2:error] [pid 2205197:tid 2205197] [client 172.245.102.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-global": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZm6LOPsi4YomzVN4sty9gAAAAk"] [Sat Feb 21 18:59:09.516825 2026] [security2:error] [pid 2205197:tid 2205197] [client 172.245.102.30:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/bwtand-ip": Permission denied [hostname "bwtand.com"] [uri "/cgi-sys/ea-php74/wp-login.php"] [unique_id "aZm6LOPsi4YomzVN4sty9gAAAAk"] [Sat Feb 21 18:59:35.300823 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 18:59:56.992838 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6XJpe9KOFdAtIQx5t2gAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 18:59:56.992910 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6XJpe9KOFdAtIQx5t2gAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A5 [Sat Feb 21 18:59:58.802483 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6XnMi1barCLgbQ6H4HAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda [Sat Feb 21 18:59:58.802574 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6XnMi1barCLgbQ6H4HAAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda [Sat Feb 21 19:00:36.920145 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6hFAuKWjBndpBvNweqAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 19:00:36.920227 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6hFAuKWjBndpBvNweqAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 19:00:54.683307 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:01:05.339019 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6oVAuKWjBndpBvNwetAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fpower [Sat Feb 21 19:01:05.339126 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6oVAuKWjBndpBvNwetAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fpower [Sat Feb 21 19:01:10.637409 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6pgZjKw2rGmSiIPuR9AAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem [Sat Feb 21 19:01:10.637572 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm6pgZjKw2rGmSiIPuR9AAAAAs"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem [Sat Feb 21 19:01:54.183085 2026] [security2:error] [pid 2190250:tid 2190250] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo4.247reactionpower.com"] [uri "/.git/config"] [unique_id "aZm60lMqSo7iS-0AaIscEAAAABM"] [Sat Feb 21 19:01:56.646598 2026] [security2:error] [pid 2190250:tid 2190250] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo4.247reactionpower.com"] [uri "/.env"] [unique_id "aZm61FMqSo7iS-0AaIscEQAAABM"] [Sat Feb 21 19:01:58.548698 2026] [security2:error] [pid 2190250:tid 2190250] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo4.247reactionpower.com"] [uri "/api/.env"] [unique_id "aZm61lMqSo7iS-0AaIscEgAAABM"] [Sat Feb 21 19:02:07.415158 2026] [security2:error] [pid 2203202:tid 2203202] [client 37.140.223.212:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css"] [unique_id "aZm6381oL3kMBEDxMn8ymQAAAAA"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:02:07.415239 2026] [security2:error] [pid 2203202:tid 2203202] [client 37.140.223.212:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css"] [unique_id "aZm6381oL3kMBEDxMn8ymQAAAAA"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:02:08.258766 2026] [security2:error] [pid 2203202:tid 2203202] [client 37.140.223.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/elementor/assets/lib/e-gallery/css/e-gallery.min.css"] [unique_id "aZm64M1oL3kMBEDxMn8ymgAAAAA"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:02:08.258816 2026] [security2:error] [pid 2203202:tid 2203202] [client 37.140.223.184:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/plugins/elementor/assets/lib/e-gallery/css/e-gallery.min.css"] [unique_id "aZm64M1oL3kMBEDxMn8ymgAAAAA"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:02:11.414452 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 66.249.79.203:0] AH01797: client denied by server configuration: /home/advertwisely/public_html/header.php [Sat Feb 21 19:02:21.935166 2026] [security2:error] [pid 2202872:tid 2202872] [client 136.144.33.231:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-includes/js/wp-emoji-release.min.js"] [unique_id "aZm67U-1x314J6ndw4N2xAAAAAI"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:02:21.935261 2026] [security2:error] [pid 2202872:tid 2202872] [client 136.144.33.231:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-includes/js/wp-emoji-release.min.js"] [unique_id "aZm67U-1x314J6ndw4N2xAAAAAI"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:02:25.127624 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:02:26.631800 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm68jTmOKCj9aq7wSOe9QAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:02:26.631949 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm68jTmOKCj9aq7wSOe9QAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:02:27.690186 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm680-1x314J6ndw4N2yAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 19:02:27.690256 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm680-1x314J6ndw4N2yAAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 19:02:42.962653 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7As1oL3kMBEDxMn8yswAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:02:42.962738 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7As1oL3kMBEDxMn8yswAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:03:17.789959 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7JePsi4YomzVN4stzaQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 19:03:17.790049 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7JePsi4YomzVN4stzaQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A1 [Sat Feb 21 19:03:30.093128 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:03:30.138991 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:03:31.997550 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 19:03:45.404570 2026] [security2:error] [pid 2206493:tid 2206493] [client 37.140.223.179:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-global": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/themes/airvice/assets/css/default.css"] [unique_id "aZm7QY_mF86VY-svYl1C5AAAAAM"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:03:45.404638 2026] [security2:error] [pid 2206493:tid 2206493] [client 37.140.223.179:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/arcticairandrefr-ip": Permission denied [hostname "arcticairandrefrigeration.com"] [uri "/wp-content/themes/airvice/assets/css/default.css"] [unique_id "aZm7QY_mF86VY-svYl1C5AAAAAM"], referer: https://arcticairandrefrigeration.com/ [Sat Feb 21 19:03:52.387565 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7SM1oL3kMBEDxMn8y1AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F3 [Sat Feb 21 19:03:52.387655 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7SM1oL3kMBEDxMn8y1AAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq%2F3 [Sat Feb 21 19:03:56.576165 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7TFMqSo7iS-0AaIscUwAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0 [Sat Feb 21 19:03:56.576343 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7TFMqSo7iS-0AaIscUwAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fsubsystem%2Fdevices%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0 [Sat Feb 21 19:04:00.814934 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7UFAuKWjBndpBvNwfDQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 19:04:00.814989 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7UFAuKWjBndpBvNwfDQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0 [Sat Feb 21 19:04:05.106828 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7VVMqSo7iS-0AaIscWAAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:04:05.106935 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7VVMqSo7iS-0AaIscWAAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:04:10.950145 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:12.786868 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 212.112.19.105:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:24.451037 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 146.70.170.36:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:25.967343 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 165.231.182.144:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:27.993313 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 51.210.111.7:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:29.242606 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 51.210.111.26:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:30.402953 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:04:31.714183 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 45.133.193.61:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:33.489523 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 217.79.119.35:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:35.030890 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 176.125.230.28:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:36.478461 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 141.98.100.195:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/xmlrpc.php [Sat Feb 21 19:04:39.799487 2026] [security2:error] [pid 2172634:tid 2172634] [client 199.45.154.145:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-global": Permission denied [hostname "mail.curvedconnections.com"] [uri "/"] [unique_id "aZm7d5pe9KOFdAtIQx5uXwAAAAw"] [Sat Feb 21 19:04:39.799556 2026] [security2:error] [pid 2172634:tid 2172634] [client 199.45.154.145:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/curvedcon-ip": Permission denied [hostname "mail.curvedconnections.com"] [uri "/"] [unique_id "aZm7d5pe9KOFdAtIQx5uXwAAAAw"] [Sat Feb 21 19:04:40.373478 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 19:04:41.663355 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 19:04:42.743190 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 19:04:43.985410 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 19:04:45.180157 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/admin-ajax.php [Sat Feb 21 19:04:50.293411 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-editor.php [Sat Feb 21 19:04:51.623227 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-editor.php [Sat Feb 21 19:04:52.815254 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/theme-install.php [Sat Feb 21 19:04:54.125856 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7huPsi4YomzVN4stzogAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 19:04:54.125981 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7huPsi4YomzVN4stzogAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda3%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 19:04:54.140723 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 19:04:55.309799 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 19:04:56.493716 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 19:04:57.634395 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 19:04:58.848757 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugin-install.php [Sat Feb 21 19:05:00.255248 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 19:05:00.479588 2026] [cgi:error] [pid 2206493:tid 2206493] [client 199.45.154.145:0] AH02812: stderr from /home/curvedcon/public_html/cgi-bin/: attempt to invoke directory as script, referer: http://mail.curvedconnections.com:80/cgi-bin [Sat Feb 21 19:05:02.058536 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 19:05:03.624890 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 19:05:05.002313 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 19:05:06.316977 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 195.123.216.134:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-admin/plugins.php [Sat Feb 21 19:05:15.689435 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7m81oL3kMBEDxMn8zAwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 19:05:15.689514 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7m81oL3kMBEDxMn8zAwAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4 [Sat Feb 21 19:05:18.927610 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7njTmOKCj9aq7wSOfTAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 19:05:18.927698 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7njTmOKCj9aq7wSOfTAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A4%2Fsubsystem [Sat Feb 21 19:05:22.995758 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7ouPsi4YomzVN4stzrQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 19:05:22.995814 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7ouPsi4YomzVN4stzrQAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fbdi%2Fsubsystem [Sat Feb 21 19:05:41.219766 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:05:53.488569 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7wVAuKWjBndpBvNwfTAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6 [Sat Feb 21 19:05:53.488641 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7wVAuKWjBndpBvNwfTAAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop3%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6 [Sat Feb 21 19:05:58.682943 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7xppe9KOFdAtIQx5uhAAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:05:58.683043 2026] [security2:error] [pid 2172634:tid 2172634] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7xppe9KOFdAtIQx5uhAAAAAw"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop2%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A2%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:06:10.300369 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm70s1oL3kMBEDxMn8zGQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1 [Sat Feb 21 19:06:10.300458 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm70s1oL3kMBEDxMn8zGQAAAAA"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fsda1 [Sat Feb 21 19:06:19.739273 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm72wZjKw2rGmSiIPuSlAAAAAs"] [Sat Feb 21 19:06:19.739345 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm72wZjKw2rGmSiIPuSlAAAAAs"] [Sat Feb 21 19:06:22.372549 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm73nMi1barCLgbQ6H41gAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 19:06:22.372677 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm73nMi1barCLgbQ6H41gAAAAY"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fsubsystem%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 19:06:33.126431 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm76XMi1barCLgbQ6H42wAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 19:06:33.126521 2026] [security2:error] [pid 2201885:tid 2201885] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm76XMi1barCLgbQ6H42wAAAAY"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 19:06:47.114469 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7981oL3kMBEDxMn8zMAAAAAA"] [Sat Feb 21 19:06:47.114553 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7981oL3kMBEDxMn8zMAAAAAA"] [Sat Feb 21 19:06:47.267470 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm791MqSo7iS-0AaIscswAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 19:06:47.267718 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm791MqSo7iS-0AaIscswAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7 [Sat Feb 21 19:06:49.939240 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7-VMqSo7iS-0AaIsctwAAABM"] [Sat Feb 21 19:06:49.939309 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7-VMqSo7iS-0AaIsctwAAABM"] [Sat Feb 21 19:06:55.637668 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7_81oL3kMBEDxMn8zOAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5 [Sat Feb 21 19:06:55.637782 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm7_81oL3kMBEDxMn8zOAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A5 [Sat Feb 21 19:06:58.860839 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8AlMqSo7iS-0AaIscvAAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 19:06:58.860938 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8AlMqSo7iS-0AaIscvAAAABM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda2%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A4 [Sat Feb 21 19:07:00.283323 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:07:01.018634 2026] [security2:error] [pid 2205197:tid 2205197] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8BOPsi4YomzVN4stz4gAAAAk"] [Sat Feb 21 19:07:01.018702 2026] [security2:error] [pid 2205197:tid 2205197] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8BOPsi4YomzVN4stz4gAAAAk"] [Sat Feb 21 19:07:06.098839 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/x.php [Sat Feb 21 19:07:06.387598 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/chosen.php [Sat Feb 21 19:07:07.256098 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/okxh.php [Sat Feb 21 19:07:07.524959 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/shell20211028.php [Sat Feb 21 19:07:07.809320 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zqhfn.php [Sat Feb 21 19:07:08.389040 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/k.php [Sat Feb 21 19:07:08.922959 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/403.php [Sat Feb 21 19:07:09.196335 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/fimai.php [Sat Feb 21 19:07:09.489709 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/maul.php [Sat Feb 21 19:07:09.772600 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/elp.php [Sat Feb 21 19:07:10.040175 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/tt.php [Sat Feb 21 19:07:10.897041 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/an.php [Sat Feb 21 19:07:11.185800 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/orouu.php [Sat Feb 21 19:07:11.476565 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/config.php [Sat Feb 21 19:07:11.767153 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/z.php [Sat Feb 21 19:07:12.074497 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/55b76.php [Sat Feb 21 19:07:12.621639 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/kalso.php [Sat Feb 21 19:07:13.094461 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/web.php [Sat Feb 21 19:07:13.372166 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/5b9ac.php [Sat Feb 21 19:07:13.668000 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/system.php [Sat Feb 21 19:07:14.670475 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/byp.php [Sat Feb 21 19:07:16.204511 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/domains.php [Sat Feb 21 19:07:16.569376 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/clss.php [Sat Feb 21 19:07:17.144877 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/autoload_classmap.php [Sat Feb 21 19:07:17.617794 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/byp.php [Sat Feb 21 19:07:18.237669 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/zc-104.php [Sat Feb 21 19:07:18.890151 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/6kDPjgFTmvS.php [Sat Feb 21 19:07:19.178511 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/vanda.php [Sat Feb 21 19:07:19.789393 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/install.php [Sat Feb 21 19:07:21.560659 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gdn.php [Sat Feb 21 19:07:21.939878 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/cache.php [Sat Feb 21 19:07:22.670125 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/asd.php [Sat Feb 21 19:07:22.947545 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/favicon.php [Sat Feb 21 19:07:23.239371 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/file.php [Sat Feb 21 19:07:23.518423 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rzki.php [Sat Feb 21 19:07:23.810007 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/buy.php [Sat Feb 21 19:07:24.089425 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/install.php [Sat Feb 21 19:07:24.499209 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/inputs.php [Sat Feb 21 19:07:25.369979 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/ws.php [Sat Feb 21 19:07:25.655210 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/44.php [Sat Feb 21 19:07:26.486499 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/404.php [Sat Feb 21 19:07:28.524898 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-config-sample.php [Sat Feb 21 19:07:28.811066 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rip.php [Sat Feb 21 19:07:30.244804 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/404.php [Sat Feb 21 19:07:30.522643 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-blog.php [Sat Feb 21 19:07:30.795528 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/info.php [Sat Feb 21 19:07:31.368038 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/rip.php [Sat Feb 21 19:07:35.962030 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/h.php [Sat Feb 21 19:07:36.262640 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/56c53.php [Sat Feb 21 19:07:36.831706 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/i.php [Sat Feb 21 19:07:37.103796 2026] [access_compat:error] [pid 2118467:tid 2118467] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xsas.php [Sat Feb 21 19:07:37.397964 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/varb.php [Sat Feb 21 19:07:37.994865 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/xxzdc.php [Sat Feb 21 19:07:38.274419 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/gdn.php [Sat Feb 21 19:07:38.546473 2026] [access_compat:error] [pid 2206493:tid 2206493] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/elp.php [Sat Feb 21 19:07:38.849886 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/144.php [Sat Feb 21 19:07:39.508782 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/wp-conf.php [Sat Feb 21 19:07:40.089909 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/lm15.php [Sat Feb 21 19:07:40.389095 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/inputs.php [Sat Feb 21 19:07:41.469619 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/d12.php [Sat Feb 21 19:07:41.734173 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/test.php [Sat Feb 21 19:07:41.816192 2026] [security2:error] [pid 2206493:tid 2206493] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/default/grub" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default/grub found within ARGS:path: /etc/default/grub.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm8LY_mF86VY-svYl1DdQAAAAM"] [Sat Feb 21 19:07:42.020646 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/hehe.php [Sat Feb 21 19:07:42.754408 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/themes.php [Sat Feb 21 19:07:43.137876 2026] [access_compat:error] [pid 2201885:tid 2201885] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/bo.php [Sat Feb 21 19:07:43.430533 2026] [access_compat:error] [pid 2208840:tid 2208840] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/a5e0a.php [Sat Feb 21 19:07:43.702911 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 20.205.3.49:0] AH01797: client denied by server configuration: /home/oneboxpk/public_html/z.php [Sat Feb 21 19:08:00.931328 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8QAZjKw2rGmSiIPuS4gAAAAs"] [Sat Feb 21 19:08:00.931422 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8QAZjKw2rGmSiIPuS4gAAAAs"] [Sat Feb 21 19:08:01.580019 2026] [access_compat:error] [pid 2205197:tid 2205197] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:08:16.210686 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8UAZjKw2rGmSiIPuS7wAAAAs"] [Sat Feb 21 19:08:16.210770 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8UAZjKw2rGmSiIPuS7wAAAAs"] [Sat Feb 21 19:08:16.571389 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8UJpe9KOFdAtIQx5u7AAAAAw"] [Sat Feb 21 19:08:16.571476 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8UJpe9KOFdAtIQx5u7AAAAAw"] [Sat Feb 21 19:09:01.960330 2026] [access_compat:error] [pid 2172634:tid 2172634] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:09:04.311396 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8gDTmOKCj9aq7wSOf3wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0 [Sat Feb 21 19:09:04.311603 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8gDTmOKCj9aq7wSOf3wAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0 [Sat Feb 21 19:09:25.248736 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/ssh/sshd_config" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ssh/sshd_config found within ARGS:path: /etc/ssh/sshd_config.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm8lVMqSo7iS-0AaIsdMwAAABM"] [Sat Feb 21 19:09:30.599815 2026] [security2:error] [pid 2202872:tid 2202872] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8mk-1x314J6ndw4N30QAAAAI"] [Sat Feb 21 19:09:30.600299 2026] [security2:error] [pid 2202872:tid 2202872] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8mk-1x314J6ndw4N30QAAAAI"] [Sat Feb 21 19:09:32.781955 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8nFMqSo7iS-0AaIsdPQAAABM"] [Sat Feb 21 19:09:32.782039 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8nFMqSo7iS-0AaIsdPQAAABM"] [Sat Feb 21 19:09:37.329980 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8oZpe9KOFdAtIQx5vJwAAAAw"] [Sat Feb 21 19:09:37.330085 2026] [security2:error] [pid 2172634:tid 2172634] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8oZpe9KOFdAtIQx5vJwAAAAw"] [Sat Feb 21 19:10:04.298956 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8vE-1x314J6ndw4N36wAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0 [Sat Feb 21 19:10:04.299056 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8vE-1x314J6ndw4N36wAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A0 [Sat Feb 21 19:10:09.392838 2026] [security2:error] [pid 2222398:tid 2222398] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8wSTAoH4RmNyfiJBB_gAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 19:10:09.392918 2026] [security2:error] [pid 2222398:tid 2222398] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8wSTAoH4RmNyfiJBB_gAAAAU"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fmq [Sat Feb 21 19:10:18.536780 2026] [access_compat:error] [pid 2202872:tid 2202872] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:10:26.387806 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm80s1oL3kMBEDxMn8zwAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 19:10:26.387888 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm80s1oL3kMBEDxMn8zwAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 19:10:41.461879 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 19:10:43.761852 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm841MqSo7iS-0AaIsdbAAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 19:10:43.761930 2026] [security2:error] [pid 2190250:tid 2190250] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm841MqSo7iS-0AaIsdbAAAABM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice [Sat Feb 21 19:10:44.234120 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm85OPsi4YomzVN4st0jAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:10:44.234207 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm85OPsi4YomzVN4st0jAAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop1%2Fbdi%2Fsubsystem%2F7%3A5%2Fsubsystem%2F7%3A2%2Fsubsystem%2F7%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:10:49.172869 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm86XMi1barCLgbQ6H5oAAAAAY"] [Sat Feb 21 19:10:49.172971 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm86XMi1barCLgbQ6H5oAAAAAY"] [Sat Feb 21 19:10:49.359203 2026] [security2:error] [pid 2205197:tid 2205197] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm86ePsi4YomzVN4st0kwAAAAk"] [Sat Feb 21 19:10:49.359284 2026] [security2:error] [pid 2205197:tid 2205197] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm86ePsi4YomzVN4st0kwAAAAk"] [Sat Feb 21 19:10:58.981153 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm88lAuKWjBndpBvNwgJgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:10:58.981281 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm88lAuKWjBndpBvNwgJgAAAAQ"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:11:11.284656 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8_zTmOKCj9aq7wSOgRQAAAAE"] [Sat Feb 21 19:11:11.284748 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm8_zTmOKCj9aq7wSOgRQAAAAE"] [Sat Feb 21 19:11:48.428458 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9JI_mF86VY-svYl1EJQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda [Sat Feb 21 19:11:48.428569 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9JI_mF86VY-svYl1EJQAAAAM"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fblock%2Fsda [Sat Feb 21 19:11:49.246398 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9JTTmOKCj9aq7wSOgXAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3 [Sat Feb 21 19:11:49.246483 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9JTTmOKCj9aq7wSOgXAAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A3 [Sat Feb 21 19:12:02.899919 2026] [security2:error] [pid 2202872:tid 2202872] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm9Mk-1x314J6ndw4N4PQAAAAI"] [Sat Feb 21 19:12:05.321914 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9NSTAoH4RmNyfiJBCUQAAAAU"] [Sat Feb 21 19:12:05.322022 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9NSTAoH4RmNyfiJBCUQAAAAU"] [Sat Feb 21 19:12:12.409028 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9PHMi1barCLgbQ6H53gAAAAY"] [Sat Feb 21 19:12:12.409088 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9PHMi1barCLgbQ6H53gAAAAY"] [Sat Feb 21 19:12:13.412626 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9PVMqSo7iS-0AaIsdtgAAABM"] [Sat Feb 21 19:12:13.412714 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9PVMqSo7iS-0AaIsdtgAAABM"] [Sat Feb 21 19:12:20.573726 2026] [core:warn] [pid 2503394:tid 2503394] (101)Network is unreachable: AH00056: connect to listener on [::]:444 [Sat Feb 21 19:12:21.657586 2026] [security2:error] [pid 2205197:tid 2205197] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo5.247reactionpower.com"] [uri "/api/.env"] [unique_id "aZm9RePsi4YomzVN4st02AAAAAk"] [Sat Feb 21 19:12:22.647837 2026] [security2:error] [pid 2203202:tid 2203202] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo5.247reactionpower.com"] [uri "/.env"] [unique_id "aZm9Rs1oL3kMBEDxMn80HQAAAAA"] [Sat Feb 21 19:12:23.410860 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9RwZjKw2rGmSiIPuToAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 19:12:23.410991 2026] [security2:error] [pid 2205840:tid 2205840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9RwZjKw2rGmSiIPuToAAAAAs"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A6%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A0 [Sat Feb 21 19:12:25.744526 2026] [security2:error] [pid 2201885:tid 2201885] [client 195.178.110.187:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "demo5.247reactionpower.com"] [uri "/.git/config"] [unique_id "aZm9SXMi1barCLgbQ6H56AAAAAY"] [Sat Feb 21 19:12:31.459642 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:12:32.299069 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9UDTmOKCj9aq7wSOggQAAAAE"] [Sat Feb 21 19:12:32.299156 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9UDTmOKCj9aq7wSOggQAAAAE"] [Sat Feb 21 19:12:49.664352 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9YU-1x314J6ndw4N4XgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 19:12:49.664501 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9YU-1x314J6ndw4N4XgAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem [Sat Feb 21 19:12:55.997769 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9Z4_mF86VY-svYl1EWAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:12:55.997831 2026] [security2:error] [pid 2206493:tid 2206493] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9Z4_mF86VY-svYl1EWAAAAAM"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop4%2Fbdi%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A7%2Fsubsystem%2F7%3A1%2Fsubsystem%2F8%3A0 [Sat Feb 21 19:12:57.389538 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9aU-1x314J6ndw4N4YQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 19:12:57.389628 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9aU-1x314J6ndw4N4YQAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda2 [Sat Feb 21 19:13:14.678265 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9enMi1barCLgbQ6H6EwAAAAY"] [Sat Feb 21 19:13:14.678323 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9enMi1barCLgbQ6H6EwAAAAY"] [Sat Feb 21 19:13:31.266452 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9izTmOKCj9aq7wSOgtQAAAAE"] [Sat Feb 21 19:13:31.266537 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9izTmOKCj9aq7wSOgtQAAAAE"] [Sat Feb 21 19:13:33.822345 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9jVAuKWjBndpBvNwgmwAAAAQ"] [Sat Feb 21 19:13:33.822405 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9jVAuKWjBndpBvNwgmwAAAAQ"] [Sat Feb 21 19:13:36.474319 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9kCTAoH4RmNyfiJBCqAAAAAU"] [Sat Feb 21 19:13:36.474406 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9kCTAoH4RmNyfiJBCqAAAAAU"] [Sat Feb 21 19:13:39.291255 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9kzTmOKCj9aq7wSOgvwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 19:13:39.291381 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9kzTmOKCj9aq7wSOgvwAAAAE"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fsda3%2Fsubsystem [Sat Feb 21 19:13:50.783133 2026] [access_compat:error] [pid 2203202:tid 2203202] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:13:52.444420 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/modules" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/modules found within ARGS:path: /etc/modules-load.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm9oM1oL3kMBEDxMn80ZgAAAAA"] [Sat Feb 21 19:14:00.383212 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9qFAuKWjBndpBvNwgsQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 19:14:00.383337 2026] [security2:error] [pid 2118467:tid 2118467] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9qFAuKWjBndpBvNwgsQAAAAQ"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda [Sat Feb 21 19:14:03.511802 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9q0-1x314J6ndw4N4rQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 19:14:03.511886 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9q0-1x314J6ndw4N4rQAAAAI"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F8%3A0%2Fsubsystem%2F7%3A4%2Fsubsystem%2F7%3A1 [Sat Feb 21 19:14:04.289351 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm9rFMqSo7iS-0AaIseGAAAABM"] [Sat Feb 21 19:14:28.142069 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9xE-1x314J6ndw4N4vAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 19:14:28.142174 2026] [security2:error] [pid 2202872:tid 2202872] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9xE-1x314J6ndw4N4vAAAAAI"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice [Sat Feb 21 19:14:36.903181 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9zFAuKWjBndpBvNwgyQAAAAQ"] [Sat Feb 21 19:14:36.903263 2026] [security2:error] [pid 2118467:tid 2118467] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm9zFAuKWjBndpBvNwgyQAAAAQ"] [Sat Feb 21 19:14:41.102075 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: Warning. Matched phrase "etc/init.d" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "41"] [id "930120"] [rev "4"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init.d found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm90c1oL3kMBEDxMn80jgAAAAA"] [Sat Feb 21 19:14:56.372923 2026] [access_compat:error] [pid 2205840:tid 2205840] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:15:06.073691 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S](?:x(?:link:href|html|mlns)|!ENTITY.*?SYSTEM|data:text\\\\/html|pattern(?=.*?=)|formaction|\\\\@import|base64)\\\\b" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "58"] [id "941130"] [rev "2"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: /base64 found within ARGS:path: /home/oneboxpk/nodeapps/backend/node_modules/base64-js"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "www.akcpa.onebox.pk"] [uri "/d19b7f/"] [unique_id "aZm96gZjKw2rGmSiIPuUIgAAAAs"] [Sat Feb 21 19:15:08.173029 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm97HMi1barCLgbQ6H6ZgAAAAY"] [Sat Feb 21 19:15:08.173134 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm97HMi1barCLgbQ6H6ZgAAAAY"] [Sat Feb 21 19:15:09.631396 2026] [security2:error] [pid 2205197:tid 2205197] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm97ePsi4YomzVN4st1YgAAAAk"] [Sat Feb 21 19:15:09.631447 2026] [security2:error] [pid 2205197:tid 2205197] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm97ePsi4YomzVN4st1YgAAAAk"] [Sat Feb 21 19:15:14.902309 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm98nMi1barCLgbQ6H6bgAAAAY"] [Sat Feb 21 19:15:14.902404 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm98nMi1barCLgbQ6H6bgAAAAY"] [Sat Feb 21 19:15:16.072203 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm981MqSo7iS-0AaIseUwAAABM"] [Sat Feb 21 19:15:16.072269 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm981MqSo7iS-0AaIseUwAAABM"] [Sat Feb 21 19:15:17.914121 2026] [security2:error] [pid 2225159:tid 2225159] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm99Vs6bkEKjlwu7WPdiAAAAAc"] [Sat Feb 21 19:15:17.914203 2026] [security2:error] [pid 2225159:tid 2225159] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm99Vs6bkEKjlwu7WPdiAAAAAc"] [Sat Feb 21 19:15:18.110581 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm99iTAoH4RmNyfiJBC_gAAAAU"] [Sat Feb 21 19:15:18.110662 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm99iTAoH4RmNyfiJBC_gAAAAU"] [Sat Feb 21 19:15:29.376677 2026] [security2:error] [pid 2225159:tid 2225159] [client 4.193.228.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZm-AVs6bkEKjlwu7WPdnAAAAAc"] [Sat Feb 21 19:15:29.376745 2026] [security2:error] [pid 2225159:tid 2225159] [client 4.193.228.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZm-AVs6bkEKjlwu7WPdnAAAAAc"] [Sat Feb 21 19:15:38.865933 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-CiTAoH4RmNyfiJBDIgAAAAU"] [Sat Feb 21 19:15:38.866021 2026] [security2:error] [pid 2222398:tid 2222398] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-CiTAoH4RmNyfiJBDIgAAAAU"] [Sat Feb 21 19:15:40.115432 2026] [cgi:error] [pid 2201885:tid 2201885] [client 66.132.153.121:0] AH02812: stderr from /home/curvedcon/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://mail.curvedconnections.com:443/cgi-bin [Sat Feb 21 19:15:42.133069 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-DlMqSo7iS-0AaIsegwAAABM"] [Sat Feb 21 19:15:42.133152 2026] [security2:error] [pid 2190250:tid 2190250] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-DlMqSo7iS-0AaIsegwAAABM"] [Sat Feb 21 19:15:45.815070 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Ec1oL3kMBEDxMn805QAAAAA"] [Sat Feb 21 19:15:45.815130 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Ec1oL3kMBEDxMn805QAAAAA"] [Sat Feb 21 19:15:46.079739 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-ETTmOKCj9aq7wSOhRgAAAAE"] [Sat Feb 21 19:15:46.079796 2026] [security2:error] [pid 2208840:tid 2208840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-ETTmOKCj9aq7wSOhRgAAAAE"] [Sat Feb 21 19:15:49.769114 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-FXMi1barCLgbQ6H6rQAAAAY"] [Sat Feb 21 19:15:49.769323 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-FXMi1barCLgbQ6H6rQAAAAY"] [Sat Feb 21 19:15:51.773457 2026] [security2:error] [pid 2225159:tid 2225159] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-F1s6bkEKjlwu7WPdxQAAAAc"] [Sat Feb 21 19:15:51.773560 2026] [security2:error] [pid 2225159:tid 2225159] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-F1s6bkEKjlwu7WPdxQAAAAc"] [Sat Feb 21 19:15:54.631404 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-GjTmOKCj9aq7wSOhVgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 19:15:54.631477 2026] [security2:error] [pid 2208840:tid 2208840] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-GjTmOKCj9aq7wSOhVgAAAAE"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop7%2Fbdi%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A7%2Fsubsystem [Sat Feb 21 19:15:57.202938 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-HePsi4YomzVN4st1tQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 19:15:57.203077 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-HePsi4YomzVN4st1tQAAAAk"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop6%2Fbdi%2Fsubsystem%2F7%3A3%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 19:16:14.240615 2026] [security2:error] [pid 2225159:tid 2225159] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Lls6bkEKjlwu7WPd7QAAAAc"] [Sat Feb 21 19:16:14.240675 2026] [security2:error] [pid 2225159:tid 2225159] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Lls6bkEKjlwu7WPd7QAAAAc"] [Sat Feb 21 19:16:18.084218 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-MXMi1barCLgbQ6H64AAAAAY"] [Sat Feb 21 19:16:18.084312 2026] [security2:error] [pid 2201885:tid 2201885] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-MXMi1barCLgbQ6H64AAAAAY"] [Sat Feb 21 19:16:18.764390 2026] [security2:error] [pid 2118467:tid 2118467] [client 4.193.228.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/wp-includes/css.php"] [unique_id "aZm-MlAuKWjBndpBvNwhZAAAAAQ"] [Sat Feb 21 19:16:18.764436 2026] [security2:error] [pid 2118467:tid 2118467] [client 4.193.228.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/wp-includes/css.php"] [unique_id "aZm-MlAuKWjBndpBvNwhZAAAAAQ"] [Sat Feb 21 19:16:19.951142 2026] [access_compat:error] [pid 2190250:tid 2190250] [client 37.60.246.20:0] AH01797: client denied by server configuration: /home/rentacarkarachi/public_html/wp-cron.php [Sat Feb 21 19:16:29.427886 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Pc1oL3kMBEDxMn81MAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 19:16:29.428001 2026] [security2:error] [pid 2203202:tid 2203202] [client 74.7.227.23:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Pc1oL3kMBEDxMn81MAAAAAA"], referer: https://www.akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A12.0%2Fdriver%2F0000%3A00%3A03.0%2Fdriver%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fblock%2Fsda%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fsda1%2Fsubsystem%2Floop5%2Fbdi%2Fsubsystem%2F7%3A1%2Fsubsystem%2F7%3A6%2Fsubsystem%2F7%3A5%2Fsubsystem [Sat Feb 21 19:16:33.884714 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Qc1oL3kMBEDxMn81NwAAAAA"] [Sat Feb 21 19:16:33.884787 2026] [security2:error] [pid 2203202:tid 2203202] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-Qc1oL3kMBEDxMn81NwAAAAA"] [Sat Feb 21 19:16:36.710492 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-RAZjKw2rGmSiIPuUtwAAAAs"] [Sat Feb 21 19:16:36.710585 2026] [security2:error] [pid 2205840:tid 2205840] [client 216.73.216.119:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "www.akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-RAZjKw2rGmSiIPuUtwAAAAs"] [Sat Feb 21 19:16:37.993439 2026] [security2:error] [pid 2190250:tid 2190250] [client 4.193.228.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-global": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/default.php"] [unique_id "aZm-RVMqSo7iS-0AaIse4gAAABM"] [Sat Feb 21 19:16:37.993485 2026] [security2:error] [pid 2190250:tid 2190250] [client 4.193.228.15:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/www247rp-ip": Permission denied [hostname "mypractice.247reactionpower.com"] [uri "/default.php"] [unique_id "aZm-RVMqSo7iS-0AaIse4gAAABM"] [Sat Feb 21 19:16:38.077415 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-global": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-RePsi4YomzVN4st1_QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda [Sat Feb 21 19:16:38.077502 2026] [security2:error] [pid 2205197:tid 2205197] [client 74.7.227.180:0] ModSecurity: collections_remove_stale: Failed to access DBM file "/var/cpanel/secdatadir/oneboxpk-ip": Permission denied [hostname "akcpa.onebox.pk"] [uri "/cgi-sys/ea-php83/d19b7f/index.php"] [unique_id "aZm-RePsi4YomzVN4st1_QAAAAk"], referer: https://akcpa.onebox.pk/d19b7f/?path=%2F%2Fproc%2Fself%2Froot%2Fsys%2Fbus%2Fpci%2Fdrivers%2Fpiix4_smbus%2F0000%3A00%3A01.3%2Fsubsystem%2Fdevices%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fdriver%2F0000%3A00%3A01.3%2Fi2c-0%2Fdevice%2Fsubsystem%2Fdevices%2F0000%3A00%3A05.0%2Fvirtio1%2Fhost2%2Ftarget2%3A0%3A0%2F2%3A0%3A0%3A0%2Fgeneric%2Fdevice%2Fbsg%2F2%3A0%3A0%3A0%2Fdevice%2Fgeneric%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fdriver%2F2%3A0%3A0%3A0%2Fscsi_generic%2Fsg0%2Fsubsystem%2Fsg0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_device%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda%2Fdevice%2Fscsi_generic%2Fsg0%2Fdevice%2Fscsi_disk%2F2%3A0%3A0%3A0%2Fdevice%2Fblock%2Fsda